As cited
Copy frozen at (site build).
vulnerabilities
CVE-2026-60163: MySQL Group Replication unauthenticated remote arbitrary SQL execution
CVE-2026-60163 in MySQL Group Replication allows unauthenticated remote attackers to execute arbitrary SQL on destination systems. Oracle initially classified the attack vector as local but reclassified it to adjacent network following discussion, though the full attack surface may be remotely reachable in some configurations.
Why it matters: Database administrators managing MySQL Group Replication deployments must assess exposure to this unauthenticated remote code execution vulnerability and apply patches from Oracle immediately.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CVE-2026-60163: MySQL Group Replication unauthenticated remote arbitrary SQL execution
CVE-2026-60163 affects MySQL Group Replication, allowing unauthenticated remote attackers to execute arbitrary SQL on target systems. Oracle initially classified the vulnerability with a Local attack vector but later reclassified it to Adjacent Network following community discussion.
Why it matters: Database administrators and security teams running MySQL Group Replication should assess whether systems are exposed to network-adjacent attackers and apply patches, as the vulnerability enables direct SQL execution without authentication.
- Source published
- First seen by Cybersecurity Tracker