This vulnerability affects Oracle MySQL Server and MySQL Cluster in the replication component. Supported affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. A high privileged attacker with network access via multiple protocols could exploit this vulnerability to compromise and take over the MySQL Server or Cluster. The CVSS vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. The vendor advisory from Oracle references this vulnerability as part of their July 2026 Critical Patch Update but does not explicitly confirm patch availability or remediation status for this specific CVE within the advisory text provided.

Successful exploitation can lead to full compromise and takeover of the MySQL Server or MySQL Cluster, impacting confidentiality, integrity, and availability of the affected systems. The attack requires high privileges and network access, and is considered difficult to exploit.

Patch status is not yet confirmed — check the Oracle Critical Patch Update advisory at https://www.oracle.com/security-alerts/cpujul2026.html for current remediation guidance. Oracle strongly recommends applying security patches without delay and remaining on actively-supported versions. No explicit temporary or official fix is stated in the provided advisory content for this vulnerability.