CVE Catalog

CVE-2026-101806

MediumCVSS 6.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.26%

17th percentile - higher than 17% of all known CVEs

Summary

Vulnerability in the MySQL Connectors product (component: Connector/ODBC), affecting version 26.7.1. A difficult-to-exploit flaw allows a low-privileged attacker with network access via multiple protocols to gain unauthorized creation, deletion, or modification access to critical data and unauthorized access to all data accessible in MySQL Connectors.

Risk Assessment

An attacker with basic privileges can modify or delete critical data, potentially leading to data integrity loss and information disclosure. CVSS score 6.8 indicates a high confidentiality and integrity risk.

Recommendation

Apply the available Oracle Critical Patch Update for version 26.7.1 and restrict network access to MySQL Connectors to trusted users.

Other vulnerabilities in MySQL Connectors

See all
Original NVD description (English source)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS