Vulnerability in Oracle MySQL Connectors Product - Connector/J
CVE-2026-101678

4.3MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101678?

An exploitable network access vulnerability exists in the MySQL Connectors product of Oracle MySQL (Connector/J version 26.7.0). This vulnerability can be triggered by an unauthenticated attacker with network access, requiring human interaction from another user to successfully execute an attack. When exploited, it could allow for unauthorized actions that may lead to a partial denial of service, impacting the availability of MySQL Connectors. For more details, visit the official Oracle advisory.

Affected Version(s)

MySQL Connectors 26.7.0

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.