# Oracle MySQL multiple vulnerabilities patch advisory

Published: 2026-07-23 · Severity: routine
Canonical: https://vorant.io/reports/7d3afec9-449c-55a9-b71e-6b5273da18be/oracle-mysql-multiple-vulnerabilities-patch-advisory

> Fifty CVEs across Oracle MySQL Server, Cluster, Router and related products enable remote denial of service, data breach and integrity loss.

CERT-FR has published a security advisory documenting multiple vulnerabilities across Oracle MySQL components. The affected products span MySQL Server (versions 8.4.0–8.4.10 and 9.7.0–9.7.1), MySQL Cluster (8.0.0–8.0.47, 8.4.0–8.4.10, 9.7.0–9.7.1), MySQL Router (8.4.0–8.4.10, 9.7.0–9.7.1), MySQL Connectors (9.7.0–9.7.1), and Oracle Enterprise Manager for MySQL Database (13.5.4.0.0–13.5.5.0.0).

The vulnerabilities enable three classes of attack: remote denial of service, compromise of data confidentiality, and tampering with data integrity. No details on individual vulnerability mechanics are provided in this advisory; defenders are directed to Oracle's official July 2026 Critical Patch Update bulletin for technical specifics and remediation steps.

Organizations running affected MySQL versions should prioritize patching according to Oracle's guidance. The scope and number of CVEs suggest a broad quarterly patch cycle rather than targeted zero-days, but the combination of RCE, DoS, and data compromise vectors warrants prompt assessment of deployed instances and expedited patch deployment.

## Mentioned in this report

- Vulnerabilities: CVE-2025-68161, CVE-2026-46936, CVE-2026-47008, CVE-2026-47012, CVE-2026-47023, CVE-2026-47052, CVE-2026-47064, CVE-2026-60145, CVE-2026-60163, CVE-2026-60171, CVE-2026-60174, CVE-2026-60177, CVE-2026-60178, CVE-2026-60179, CVE-2026-60180, CVE-2026-60181, CVE-2026-60182, CVE-2026-60183, CVE-2026-60184, CVE-2026-60185, CVE-2026-60186, CVE-2026-60187, CVE-2026-60188, CVE-2026-60189, CVE-2026-60190, CVE-2026-60191, CVE-2026-60192, CVE-2026-60193, CVE-2026-60194, CVE-2026-60195, CVE-2026-60311, CVE-2026-60314, CVE-2026-60315, CVE-2026-60316, CVE-2026-60317, CVE-2026-60324, CVE-2026-60331, CVE-2026-60332, CVE-2026-60569, CVE-2026-60585

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0916

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/7d3afec9-449c-55a9-b71e-6b5273da18be/oracle-mysql-multiple-vulnerabilities-patch-advisory.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup