Live › vulnerability › CVE-2026-101677
Go to dashboardOracle's MySQL Connector/J 26.7.0 has a flaw that an unauthenticated attacker with network access can trigger, with a person's action needed to complete it. A successful attack can allow unauthorized update, insert or delete of some data the connector can reach.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that bundle or depend on MySQL Connector/J 26.7.0 and connect to MySQL over the network are the ones to look at. The sources do not say which connection settings or data paths are needed to reach the flaw, so teams on other Connector/J versions can skip it.
No product ranges from the sources yet.
mysql-connector-j jar on the classpath.26.7.0, as listed in the description.26.7.0 (the fixed version is unknown from the sources).Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-101677")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.