CVE Tools

MySQL

1,673 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for MySQL, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

MySQL CVEs per month

Oct 2024 to Sep 2026. Point at a month, or focus the strip and use the arrow keys.
MySQL CVEs per month
MonthCVEs
2024-1028
2024-110
2024-120
2025-0130
2025-020
2025-030
2025-0428
2025-050
2025-060
2025-0730
2025-080
2025-090
2025-109
2025-110
2025-120
2026-0111
2026-020
2026-030
2026-0428
2026-050
2026-061
2026-0741
2026-080
2026-090

Severity

How the 1,673 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical201%
  • High976%
  • Medium1,35181%
  • Low20412%

Latest CVEs

The 15 most recently published vulnerabilities affecting MySQL.

  1. CVE-2026-61144Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9....4.9
  2. CVE-2026-61128Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9....4.9
  3. CVE-2026-61109Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:...6.5
  4. CVE-2026-61108Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. E...6.5
  5. CVE-2026-61096Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQ...2.9
  6. CVE-2026-61094Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL C...7.2
  7. CVE-2026-61093Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9....6.5
  8. CVE-2026-61081Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; ...2.7
  9. CVE-2026-60747Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL C...6.2
  10. CVE-2026-60718Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. ...6.5
  11. CVE-2026-60585Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL C...6.6
  12. CVE-2026-60332Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7....6.4
  13. CVE-2026-60331Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL C...6.4
  14. CVE-2026-60324Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9....6.5
  15. CVE-2026-60316Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Clus...7.2

Product grouping is registry-driven, with AI assist and human review. How it works

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store