Live › vulnerability › CVE-2026-101626
Go to dashboardOracle's MySQL Connector/NET 26.7.0 has a flaw that a remote, unauthenticated attacker can reach over the network with some difficulty. A successful attack can expose data the connector can access, with a CVSS 3.1 score of 5.9 that counts only confidentiality impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that ship or run applications using MySQL Connector/NET version 26.7.0 to reach MySQL databases. The sources do not describe the configuration that makes an application exposed, so unknown. Teams not using Connector/NET can skip it.
No product ranges from the sources yet.
dotnet list package and look for MySql.Data or MySqlConnector, and compare against the version in the advisory.26.7.0.26.7.0 to a fixed release listed in Oracle's advisory (version not stated in the sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101626")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.