CVE-2026-101625
MediumCVSS 4.3Summary
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible through the connector, requiring user interaction.
Risk Assessment
Limited data exposure from applications using Connector/Net may occur. Impact is on confidentiality (CVSS 4.3).
Recommendation
Update MySQL Connector/Net to the version with Oracle's fix and educate users about the risk of interacting with untrusted content.
Other vulnerabilities in MySQL Connector/Net
See all- CVE-2026-101626Medium
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized access to critical data or all data accessible through the connector, although exploitation is difficult.
- CVE-2026-60317High
Difficult to exploit vulnerability in MySQL Connector/Net versions 9.7.0-9.7.1. An unauthenticated attacker with network access can gain unauthorized access to critical data and the ability to create, delete, or modify it.
- CVE-2026-60193High
Vulnerability in MySQL Connectors (component: Connector/Net) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Attack may affect additional products (scope change) and lead to takeover of MySQL Connectors.
Original NVD description (English source)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS