CVE-2026-60317 affects Oracle MySQL Connectors, specifically Connector/Net versions 9.7.0 to 9.7.1. The vulnerability allows an unauthenticated attacker with network access to exploit multiple protocols to compromise the connectors, leading to unauthorized creation, deletion, or modification of critical data or full access to all data accessible via the connectors. The CVSS 3.1 base score is 7.4, indicating high severity, with confidentiality and integrity impacts but no availability impact. The vulnerability is considered difficult to exploit due to the required conditions. Oracle's July 2026 Critical Patch Update advisory lists affected versions and implies patches are available for these vulnerabilities, though no direct patch link or explicit remediation level is provided in the input data. Customers are advised to apply the latest security patches from Oracle without delay.

Successful exploitation of this vulnerability can lead to unauthorized creation, deletion, or modification of critical data or complete unauthorized access to all data accessible through MySQL Connectors. This compromises data confidentiality and integrity. There is no impact on availability. The vulnerability requires network access and is difficult to exploit, but the potential impact on data security is high.

Oracle's July 2026 Critical Patch Update includes security patches addressing this vulnerability for MySQL Connectors versions 9.7.0 through 9.7.1. Although no explicit patch link or remediation level is provided in the advisory content, Oracle strongly recommends applying the available patches promptly to mitigate this vulnerability. Users should review the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for detailed patch availability and installation instructions. No alternative mitigations or workarounds are specified.