CVE Catalog

CVE-2026-83404

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

33th percentile - higher than 33% of all known CVEs

Summary

Vulnerability in MySQL Connectors (Connector/Python component) affecting version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data or full access to all data accessible through MySQL Connectors.

Risk Assessment

An attacker could access critical data without authentication, constituting a serious confidentiality breach. The CVSS score of 7.5 indicates high risk of data leakage.

Recommendation

Update MySQL Connector/Python to a version containing the security fix. It is also advisable to restrict network access to services using this connector.

Other vulnerabilities in MySQL Connectors

See all
Original NVD description (English source)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS