Exploitable Vulnerability in MySQL Connectors by Oracle
CVE-2026-101677

4.3MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101677?

This vulnerability affects Oracle's MySQL Connectors, specifically version 26.7.0 of Connector/J. It allows an unauthenticated attacker with network access to exploit the connector, potentially leading to unauthorized modifications of accessible data. While successful exploitation necessitates interaction from another individual, the implications can result in significant integrity issues, permitting the attacker to manipulate data through updates, inserts, or deletion. Organizations utilizing this version of MySQL Connectors must prioritize the implementation of security measures to mitigate the risks associated with this vulnerability.

Affected Version(s)

MySQL Connectors 26.7.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.