CVE-2026-70724

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.48, 8.4.0-8.4.11 and 9.7.0-9.7.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H).

• CWE-284

• https://www.oracle.com/security-alerts/cspuaug2026.htmlVendor Advisory

Published

Aug 18, 2026

Last Modified

Sep 4, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-70719Vulnerability in the Oracle Hyperion Calculation Manager pro…4
• CVE-2026-7072A vulnerability was detected in CodePanda Source canteen_man…7.3
• CVE-2026-70720Vulnerability in the Oracle Production Scheduling product of…6.5
• CVE-2026-70721Vulnerability in the Oracle Hyperion Profitability and Cost …8.6
• CVE-2026-70722Vulnerability in the Oracle Advanced Inbound Telephony produ…8.2
• CVE-2026-70723Vulnerability in the Oracle Hyperion Profitability and Cost …7.7
• CVE-2026-70725Vulnerability in the Oracle Advanced Inbound Telephony produ…7.6
• CVE-2026-70726Vulnerability in the Oracle Cash Management product of Oracl…6
• CVE-2026-70727Vulnerability in the Helidon product of Oracle Fusion Middle…5.3
• CVE-2026-70728Vulnerability in Oracle Autonomous Health Framework (compone…8.5
• CVE-2026-70729Vulnerability in the Oracle Teleservice product of Oracle E-…8.8
• CVE-2026-7073A flaw has been found in itsourcecode Construction Managemen…7.3