Live › vulnerability › CVE-2026-101678
Go to dashboardMySQL Connector/J, Oracle's Java JDBC driver for MySQL, has a flaw that an unauthenticated network attacker can trigger to cause a partial denial of service. The attack needs a person other than the attacker to interact with the connection, and it affects availability only, with no data exposure reported.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams whose Java applications use Oracle MySQL Connector/J at version are in scope, and the sources name no other affected versions. The advisory describes a network attack that needs a user to act, so services that only connect to databases on a closed internal network with no untrusted input reaching the driver are lower risk. The sources do not say which data paths or configurations make a deployment exposed.
26.7.0No product ranges from the sources yet.
mvn dependency:tree | grep mysql-connector or the mysql-connector-j entry in the build file26.7.0; the sources do not name the exact fixed versionEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-101678")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.