This vulnerability (CVE-2026-60193) affects Oracle MySQL Connectors versions 9.7.0 to 9.7.1. It is characterized by a difficult-to-exploit flaw that allows an attacker with low privileges and network access to compromise the MySQL Connectors component. The attack surface includes multiple network protocols. Successful exploitation can result in full takeover of the MySQL Connectors, with significant confidentiality, integrity, and availability impacts. The vulnerability has a CVSS 3.1 score of 8.5, indicating high severity, and the scope of impact extends beyond the Connectors to other Oracle products. Oracle's July 2026 Critical Patch Update advisory references this vulnerability but does not provide explicit patch or remediation details for MySQL Connectors, leaving patch status unconfirmed.

The vulnerability allows a low-privileged attacker with network access to compromise MySQL Connectors, potentially leading to full takeover of the component. This results in high impacts on confidentiality, integrity, and availability. Additionally, the scope change indicates that exploitation may affect other Oracle products beyond MySQL Connectors, increasing the potential impact footprint.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches promptly when available and remaining on actively-supported versions. Until an official patch or workaround is confirmed, monitor Oracle advisories for updates.