Unauthenticated Network Vulnerability in Oracle MySQL Connector/J
CVE-2026-61082

6.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
21 July 2026

What is CVE-2026-61082?

An easily exploitable vulnerability exists within the Oracle MySQL Connector/J that allows unauthenticated attackers with network access to compromise the connectors. Successful exploitation requires human intervention from an individual other than the attacker, which can ultimately lead to unauthorized access to critical data or complete access to all data available through the MySQL Connectors. The affected versions include 9.7.0 and 9.7.1, posing a significant risk to data confidentiality.

Affected Version(s)

MySQL Connectors 9.7.0 <= 9.7.1

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.