Oracle MySQL Cluster vulnerabilities

94 CVEs affecting Oracle MySQL Cluster, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-70724, published 2026-08-18.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-35590, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 88.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and…
• CVE-2022-21490, published 2022-04-19. Medium severity, CVSS 6.3. EPSS: 78.7% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.35 and prior, 7.5.25 and prior, 7.6.21 and prior and 8.0.28 and…
• CVE-2021-22883, published 2021-03-03. High severity, CVSS 7.5. EPSS: 77.4% chance of exploitation in the next 30 days. Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of…
• CVE-2020-8277, published 2020-11-19. High severity, CVSS 7.5. EPSS: 54.2% chance of exploitation in the next 30 days. A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions < 15.2.1, < 14.15.1, and < 12.19.1 by getting the…
• CVE-2021-35592, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 52.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult…
• CVE-2021-35598, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 51.1% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and…
• CVE-2021-35594, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 51.1% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and…
• CVE-2021-35593, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 51.1% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and…
• CVE-2022-21550, published 2022-07-19. Medium severity, CVSS 6.3. EPSS: 50.7% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.36 and prior, 7.5.26 and prior, 7.6.22 and prior and and 8.0.29…
• CVE-2021-35621, published 2021-10-20. Medium severity, CVSS 6.3. EPSS: 50% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and…

Latest

• CVE-2026-70724, published 2026-08-18. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11 and 9.7.0-9.7.2. Difficult to exploit…
• CVE-2026-60592, published 2026-08-18. High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator). Supported versions that are affected are 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily…
• CVE-2026-61144, published 2026-07-21. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:…
• CVE-2026-61128, published 2026-07-21. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:…
• CVE-2026-61109, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:…
• CVE-2026-61108, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1.…
• CVE-2026-61096, published 2026-07-21. Low severity, CVSS 2.9. EPSS: 0.1% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…
• CVE-2026-61094, published 2026-07-21. High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL…
• CVE-2026-61093, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster:…
• CVE-2026-61081, published 2026-07-21. Low severity, CVSS 2.7. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1;…