Denial of Service Vulnerability in Oracle MySQL Connectors
CVE-2026-60624

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
21 July 2026

What is CVE-2026-60624?

A vulnerability exists in Oracle MySQL Connectors, specifically within Connector/J, allowing for unauthorized network access. Affected versions 9.7.0 and 9.7.1 may allow an unauthenticated attacker to exploit the vulnerability. Successful exploitation requires interaction from a user other than the attacker, potentially leading to service disruptions such as hangs or repeated crashes. This makes the MySQL Connectors component susceptible to Denial of Service attacks, impacting availability. Users are encouraged to upgrade to secure versions to mitigate these risks.

Affected Version(s)

MySQL Connectors 9.7.0 <= 9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.