CVE-2026-61082: Infoleak
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (Connector/J) - MySQL Connectorsto a version that resolves this vulnerability.Fixed in 9.7.0-9.7.1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-61082?
CVE-2026-61082 has a medium severity rating of 6.5.
How do I fix CVE-2026-61082?
To fix CVE-2026-61082, upgrade the MySQL Connectors to a version higher than 9.7.1.
What types of vulnerabilities are associated with CVE-2026-61082?
CVE-2026-61082 is associated with information leakage and cross-site request forgery (CSRF) vulnerabilities.
Who is affected by CVE-2026-61082?
CVE-2026-61082 affects users of Oracle MySQL Connectors versions 9.7.0 to 9.7.1.
Can an unauthenticated attacker exploit CVE-2026-61082?
Yes, an unauthenticated attacker with network access can exploit CVE-2026-61082.