DoS Vulnerability in MySQL Connectors by Oracle
CVE-2026-71073

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Connectors
Vendor
CVE Published:
18 August 2026

What is CVE-2026-71073?

The MySQL Connectors product from Oracle has a vulnerability in its Connector/ODBC component that allows an unauthenticated attacker to exploit the system if they gain access to the infrastructure where MySQL Connectors runs. This vulnerability is particularly concerning as it requires some human interaction from individuals other than the attacker, enabling the possibility of an unauthorized denial of service (DoS) attack. If successfully executed, this could lead to a complete system hang or result in frequent crashes of MySQL Connectors, impacting the availability of connected applications.

Affected Version(s)

MySQL Connectors 26.7.0

References

https://www.oracle.com/security-alerts/cspuaug2026.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.