Vulnerability in MySQL Connectors Product of Oracle MySQL
CVE-2026-101625

4.3MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101625?

A vulnerability exists in the MySQL Connectors component of Oracle MySQL that can be exploited by an unauthenticated attacker with network access. This issue affects the supported version 26.7.0 of the MySQL Connector/Net. The exploit requires human interaction from a third party to successfully execute, leading to unauthorized read access to a limited subset of data. Organizations utilizing this version should be aware of potential security risks and implement necessary measures to protect their data.

Affected Version(s)

MySQL Connectors 26.7.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.