In Oracle MySQL Connector/J version 26.7.0 a flaw allows an unauthenticated attacker with network access to trigger a partial denial of service. The vulnerability is easily exploitable and requires human interaction from a user other than the attacker to activate. Once exploited, the attacker can interrupt the availability of the connector, potentially disrupting database connectivity for client applications.

Oracle MySQL Connector/J, version 26.7.0 is the only affected release. No other Connector/J versions are impacted by this vulnerability according to the current advisory.

The CVSS 3.1 base score is 4.3, indicating a moderate impact on availability. The EPSS score of <1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog, suggesting limited widespread exploitation. The attack vector is network access via multiple protocols; an adversary must reach the system and involve a user other than the attacker to trigger the DoS condition, which reduces the likelihood somewhat but remains a risk for organizations with exposed connectors.