CVE-2026-101804: Low severity Oracle MySQL Connectors vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 2.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Exposure is limited to environments running the affected MySQL Connector/ODBC version 26.7.1 where an attacker can log on to the infrastructure hosting the connector. The attack is local rather than network-based.
What must an attacker do to exploit it?
The attacker does not need prior privileges, but must have infrastructure logon access and must induce human interaction by someone other than the attacker. Exploitation is rated difficult and can cause only a partial denial of service.
What is the expected impact if exploitation succeeds?
Successful exploitation can partially deny service in MySQL Connectors. The provided CVSS vector indicates no confidentiality or integrity impact.