CVE-2026-70724

HighCVSS 7.5

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

24th percentile - higher than 24% of all known CVEs

Summary

Vulnerability in MySQL Cluster (component: Cluster: General) affects versions 8.0.0-8.0.48, 8.4.0-8.4.11, and 9.7.0-9.7.2. An unauthenticated attacker can take over MySQL Cluster over HTTP with user interaction.

Risk Assessment

Risk is high – full cluster takeover, potentially leading to confidentiality, integrity, and availability breaches. Exploitation is difficult but impact is critical.

Recommendation

Apply patches from Oracle. Restrict network access to the cluster and educate users about interacting with untrusted content.

Original NVD description (English source)

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11 and 9.7.0-9.7.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).