Live › vulnerability › CVE-2026-83404
Go to dashboardOracle's MySQL Connector/Python 26.7.0 has a flaw that lets an unauthenticated attacker reach the connector over the network. Successful exploitation gives read access to data the connector can reach, per the CVSS vector (confidentiality high, no integrity or availability impact).
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Applications that load MySQL Connector/Python 26.7.0 and accept network traffic that reaches the connector. The sources do not describe the exact data path or configuration needed, so the exposed surface is unknown. Teams on other connector versions or other MySQL clients can skip it.
No product ranges from the sources yet.
pip show mysql-connector-python (or pip show mysql-connector-python-rf) and compare the version with the affected 26.7.0requirements.txt for the connector version in use26.7.0 to the patched release named in Oracle's advisory (unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
This page as .md · .json · in your agent: get_signal("CVE-2026-83404")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.