CVE-2026-101768
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.
Risk Assessment
Takeover of the connector may allow an attacker to manipulate connections and data of applications using Connector/J.
Recommendation
Update MySQL Connector/J to a version newer than 26.7.0 per Oracle guidance; monitor for unusual HTTP connections.
Other vulnerabilities in MySQL Connectors
See all- CVE-2026-83404High
Vulnerability in MySQL Connectors (Connector/Python component) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data or full access to all data accessible through MySQL Connectors.
- CVE-2026-101806Medium
Vulnerability in the MySQL Connectors product (component: Connector/ODBC), affecting version 26.7.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data accessible in MySQL Connectors.
- CVE-2026-101804Low
Vulnerability in the MySQL Connectors product (component: Connector/ODBC) affecting version 26.7.1. A difficult to exploit vulnerability requires logon to the infrastructure where MySQL Connectors executes and human interaction; it can result in a partial denial of service of MySQL Connectors.
- CVE-2026-101678Medium
Vulnerability in MySQL Connectors (component: Connector/J) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to cause a partial denial of service (partial DoS), requiring human interaction from a person other than the attacker.
- CVE-2026-101677Medium
Vulnerability in MySQL Connectors (component: Connector/J) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to perform unauthorized update, insert, or delete access to some data accessible through MySQL Connectors, requiring human interaction from a person other than the attacker.
- CVE-2026-71084Medium
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.
- CVE-2026-71079Medium
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.
- CVE-2026-71073Medium
Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).
- CVE-2026-60586High
Vulnerability in MySQL Connectors (component: Connector/J) versions 9.7.0-9.7.1. Easily exploitable, requires low-privileged attacker with network access via multiple protocols. Successful attack can lead to unauthorized access to critical data and impact other products.
- CVE-2026-60192High
Vulnerability in MySQL Connectors product of Oracle MySQL (component: Connector/Net). Affected versions are 9.7.0 and 9.7.1. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a takeover.
Original NVD description (English source)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

