CVE-2026-101678mediumCWE-284

CVE-2026-101678: medium-severity vulnerability in Oracle Corporation MySQL Connectors

Published · Updated

Follow this CVE+ Monitor MySQL Connectors

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Oracle Corporation · MySQL Connectors
Related CVEs — Oracle Corporation MySQL Connectors

In the same product, most dangerous first.

CVE-2021-2471MEDIUMCVE-2021-2471EPSS 7.5%CVE-2018-3258—CVE-2018-3258EPSS 3.7%CVE-2018-2585—CVE-2018-2585EPSS 3.0%CVE-2017-3523—CVE-2017-3523EPSS 2.9%CVE-2017-10203—CVE-2017-10203EPSS 2.6%CVE-2019-2435—CVE-2019-2435EPSS 2.5%