CVE Catalog

CVE-2026-101678

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.30%

21th percentile - higher than 21% of all known CVEs

Summary

Vulnerability in MySQL Connectors (component: Connector/J) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DoS), requiring human interaction from a person other than the attacker.

Risk Assessment

Applications using Connector/J may experience disruptions leading to partial service unavailability. The required user interaction reduces the likelihood but does not eliminate the risk.

Recommendation

Update MySQL Connector/J to a non-vulnerable version and implement controls to limit user interaction with untrusted content.

Other vulnerabilities in MySQL Connectors

See all
Original NVD description (English source)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS