This vulnerability affects Oracle MySQL Connectors component Connector/C++ in versions 9.7.0 through 9.7.1. It is difficult to exploit but allows unauthenticated attackers with network access via multiple protocols to compromise MySQL Connectors. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or full access to all data accessible via MySQL Connectors. The CVSS 3.1 vector indicates network attack vector with high attack complexity, no privileges or user interaction required, and high confidentiality and integrity impacts but no availability impact. The vendor advisory references the July 2026 Critical Patch Update, which includes security patches for MySQL Connectors among many other Oracle products, but does not explicitly confirm patch availability or remediation level for this specific vulnerability. No known exploits have been reported in the wild.

The vulnerability allows unauthorized attackers to gain significant unauthorized access to critical data handled by MySQL Connectors, including the ability to create, delete, or modify data. This compromises confidentiality and integrity of the data accessible through MySQL Connectors. There is no impact on availability reported. The high CVSS score reflects the severity of potential data compromise.

Oracle's July 2026 Critical Patch Update advisory includes security patches addressing this vulnerability among many others. Although the advisory does not explicitly confirm a patch for CVE-2026-60179, it strongly recommends that customers apply the latest security patches without delay. Users of MySQL Connectors versions 9.7.0 through 9.7.1 should review Oracle's Critical Patch Update documentation and apply any relevant patches promptly to mitigate this vulnerability. Patch status is not yet explicitly confirmed for this CVE; therefore, check the vendor advisory for current remediation guidance.