Live › vulnerability › CVE-2026-101768
Go to dashboardOracle's MySQL Connector/J, the Java JDBC driver for MySQL, has a flaw that an unauthenticated attacker can reach over HTTP from the network. Successful exploitation can lead to full takeover of the connector with high confidentiality, integrity and availability impact.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
The sources name only the supported version of Connector/J and say the attack is reached over HTTP by an unauthenticated attacker. Teams whose Java services bundle that driver version and accept HTTP traffic from untrusted networks should look first. The sources do not say which code path reaches the driver, so teams that do not use this version can skip it.
26.7.0No product ranges from the sources yet.
mvn dependency:list | grep mysql-connector26.7.0, the affected version named by the source26.7.0 to the fixed release named in Oracle's advisory (unknown in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
This page as .md · .json · in your agent: get_signal("CVE-2026-101768")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.