CVE Catalog

CVE-2026-101768

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.35%

27th percentile - higher than 27% of all known CVEs

Summary

Vulnerability in MySQL Connectors (component Connector/J) affecting version 26.7.0. A difficult-to-exploit network attack via HTTP allows an unauthenticated attacker to take over MySQL Connectors.

Risk Assessment

Takeover of the connector may allow an attacker to manipulate connections and data of applications using Connector/J.

Recommendation

Update MySQL Connector/J to a version newer than 26.7.0 per Oracle guidance; monitor for unusual HTTP connections.

Other vulnerabilities in MySQL Connectors

See all
Original NVD description (English source)

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).

Vulnerability data from NVD (NIST) · CISA KEV · EPSS