Vulnerability in MySQL Connectors by Oracle
CVE-2026-101804

2.5LOW

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
20 October 2026

What is CVE-2026-101804?

A vulnerability exists within the MySQL Connectors product of Oracle MySQL, specifically in the Connector/ODBC component. The supported version impacted is 26.7.1. The flaw allows an unauthenticated attacker with logon access to the infrastructure where MySQL Connectors operates to compromise it. Exploitation of this vulnerability necessitates human interaction from an individual other than the attacker. Successful exploitation may lead to unauthorized access, resulting in a potential partial denial of service (DoS) affecting the MySQL Connectors functionality.

Affected Version(s)

MySQL Connectors 26.7.1

References

https://www.oracle.com/security-alerts/cpuoct2026.html
vendor-advisory

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.