Fluid Attacks Database

Description

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel9	mysql	<0:8.4.11-1.module+el9.8.0+24663+27effc5a	0:8.4.11-1.module+el9.8.0+24663+27effc5a
rpm rhel8	mysql	<0:8.4.11-1.module+el8.10.0+24662+2d989aa9	0:8.4.11-1.module+el8.10.0+24662+2d989aa9
rpm rhel10	mysql8.4	<0:8.4.11-1.el10_2	0:8.4.11-1.el10_2

Aliases

1. CVE-2026-603322. NVD-2026-603323. OSV-2026-60332

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.