Live › vulnerability › CVE-2026-101804
Go to dashboardOracle's MySQL Connector/ODBC has a flaw that lets a local user who can already log on to the host partly disrupt the connector. The sources describe only a partial denial of service with no data exposure or code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams running MySQL Connector/ODBC version 26.7.1 on hosts where local users can log on and unknown others could reach the connector's workload. Systems without a local untrusted user or without this connector can skip it.
No product ranges from the sources yet.
odbcinst -j or check the installed Connector/ODBC version and compare it to 26.7.126.7.1 once Oracle publishes one (unknown from sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 2.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).
This page as .md · .json · in your agent: get_signal("CVE-2026-101804")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.