CVE-2026-61081

LowCVSS 2.7

Published: 21/07/2026(UTC)Updated: 27/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

A vulnerability in MySQL Server and MySQL Cluster (Performance Schema component) allows an authenticated attacker with high privileges to unauthorizedly read a subset of data. The attack requires network access and is easy to exploit.

Risk Assessment

An attacker can gain access to sensitive data stored in the database, compromising information confidentiality.

Recommendation

Apply the patch provided by Oracle for the affected versions of MySQL Server and MySQL Cluster.

Original NVD description (English source)

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).