CVE-2026-101626
MediumCVSS 5.9Summary
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized access to critical data or all data accessible through the connector, although exploitation is difficult.
Risk Assessment
Sensitive data processed by applications using Connector/Net may be exposed. Impact is on confidentiality (CVSS 5.9).
Recommendation
Update MySQL Connector/Net to the version with Oracle's fix and limit network exposure of services using the connector.
Other vulnerabilities in MySQL Connector/Net
See all- CVE-2026-101625Medium
A vulnerability in Oracle MySQL Connectors (Connector/Net component) affects version 26.7.0. An unauthenticated attacker with network access can gain unauthorized read access to a subset of data accessible through the connector, requiring user interaction.
- CVE-2026-60317High
Difficult to exploit vulnerability in MySQL Connector/Net versions 9.7.0-9.7.1. An unauthenticated attacker with network access can gain unauthorized access to critical data and the ability to create, delete, or modify it.
- CVE-2026-60193High
Vulnerability in MySQL Connectors (component: Connector/Net) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Attack may affect additional products (scope change) and lead to takeover of MySQL Connectors.
Original NVD description (English source)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS