Live › vulnerability › CVE-2026-101625
Go to dashboardOracle's MySQL Connector/Net 26.7.0 has a flaw that lets a remote, unauthenticated attacker read a subset of data the connector can access. Exploitation needs a person other than the attacker to take an action.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications built on .NET that use MySQL Connector/Net version 26.7.0 to reach a MySQL database. The sources do not describe the exact data path or configuration that makes an application reachable, so the exposure of a given deployment is unknown.
No product ranges from the sources yet.
unknown to find the installed Connector/Net version in the application's package manifest or NuGet lockfile26.7.026.7.0 to the patched release named in Oracle's advisory (version unknown from these sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101625")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.