CVE-2026-101677

Vulnerability in MySQL Connectors (Connector/Python component) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data or full access to all data accessible through MySQL Connectors.

Vulnerability in the MySQL Connectors product (component: Connector/ODBC), affecting version 26.7.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data accessible in MySQL Connectors.

Vulnerability in the MySQL Connectors product (component: Connector/ODBC) affecting version 26.7.1. A difficult to exploit vulnerability requires logon to the infrastructure where MySQL Connectors executes and human interaction; it can result in a partial denial of service of MySQL Connectors.

Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.

Vulnerability in MySQL Connectors (component: Connector/J) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DoS), requiring human interaction from a person other than the attacker.

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.

Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.

Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).

Vulnerability in MySQL Connectors (component: Connector/J) versions 9.7.0-9.7.1. Easily exploitable, requires low-privileged attacker with network access via multiple protocols. Successful attack can lead to unauthorized access to critical data and impact other products.

Vulnerability in MySQL Connectors product of Oracle MySQL (component: Connector/Net). Affected versions are 9.7.0 and 9.7.1. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a takeover.