UBUNTU-CVE-2026-60332

MEDIUM6.4

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1;

Published Jul 21, 2026

Modified 2 weeks ago

Fix available

Details

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Affected Packages(11 packages)

mysql-5.5

Ubuntu 14.04 LTS

Affected versions:

5.5.32-0ubuntu75.5.34-0ubuntu15.5.34-0ubuntu25.5.35+dfsg-1ubuntu15.5.35-0ubuntu15.5.37-0ubuntu0.14.04.15.5.38-0ubuntu0.14.04.15.5.40-0ubuntu0.14.04.15.5.41-0ubuntu0.14.04.15.5.43-0ubuntu0.14.04.1+15 more

mariadb-10.0

Ubuntu 16.04 LTS

Affected versions:

10.0.20-0ubuntu0.15.04.110.0.22-0ubuntu110.0.23-110.0.23-210.0.24-710.0.25-0ubuntu0.16.04.110.0.27-0ubuntu0.16.04.110.0.28-0ubuntu0.16.04.110.0.29-0ubuntu0.16.04.110.0.31-0ubuntu0.16.04.2+4 more

percona-server-5.6

Ubuntu 16.04 LTS

Affected versions:

5.6.22-rel71.0-0ubuntu25.6.22-rel71.0-0ubuntu45.6.22-rel71.0-0ubuntu4.1

percona-xtradb-cluster-5.6

Ubuntu 16.04 LTS

Affected versions:

5.6.21-25.8-0ubuntu25.6.21-25.8-0ubuntu35.6.21-25.8-0ubuntu3.15.6.21-25.8-0ubuntu3.25.6.34-26.19-0ubuntu0.16.04.15.6.34-26.19-0ubuntu0.16.04.25.6.37-26.21-0ubuntu0.16.04.15.6.37-26.21-0ubuntu0.16.04.2

mariadb-10.1

Ubuntu 18.04 LTS

Affected versions:

10.1.25-11:10.1.29-61:10.1.34-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.11:10.1.38-0ubuntu0.18.04.21:10.1.40-0ubuntu0.18.04.11:10.1.41-0ubuntu0.18.04.11:10.1.43-0ubuntu0.18.04.11:10.1.44-0ubuntu0.18.04.11:10.1.47-0ubuntu0.18.04.1+1 more

mariadb-10.3

Ubuntu 20.04 LTS

Affected versions:

1:10.3.17-11:10.3.18-11:10.3.19-11:10.3.21-21:10.3.22-11:10.3.22-1ubuntu11:10.3.25-0ubuntu0.20.04.11:10.3.29-0ubuntu0.20.04.11:10.3.30-0ubuntu0.20.04.11:10.3.31-0ubuntu0.20.04.1+5 more

mysql-8.0

Ubuntu 22.04 LTS

Fixed in:

8.0.46-0ubuntu0.22.04.4

mysql-8.0

Ubuntu 24.04 LTS

Fixed in:

8.0.46-0ubuntu0.24.04.4

mysql-8.4

Ubuntu 26.04 LTS

Fixed in:

8.4.11-0ubuntu0.26.04.1

mysql-5.7

Ubuntu Pro 16.04 LTS

Affected versions:

5.7.11-0ubuntu45.7.11-0ubuntu55.7.11-0ubuntu65.7.12-0ubuntu15.7.12-0ubuntu1.15.7.13-0ubuntu0.16.04.25.7.15-0ubuntu0.16.04.15.7.16-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.15.7.17-0ubuntu0.16.04.2+26 more

References

REPORT

https://ubuntu.com/security/CVE-2026-60332

ADVISORY

https://ubuntu.com/security/notices/USN-8700-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2026-60332

REPORT

https://www.oracle.com/security-alerts/cpujul2026.html

CVSS Analysis

CVSS v3.1

Exploitability