Description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-07-21
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw resides in Oracle MySQL Connector/C++ versions 9.7.0 through 9.7.1. An unauthenticated attacker who can reach the connector over the network can trigger a hang or repeatable crash, effectively rendering the connector unavailable. The impact is limited to availability, with no immediate breach of confidentiality or integrity.

Affected Systems

Oracle MySQL Connectors, specifically the Connector/C++ component versions 9.7.0 and 9.7.1.

Risk and Exploitability

The CVSS 3.1 base score of 7.5 indicates a high severity availability risk. The EPSS score of less than 1 percent suggests exploitation is unlikely but not impossible, and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is network‑based, requiring no prior authentication, which means any host with network access to the connector could potentially enact the denial of service.

Generated by OpenCVE AI on August 4, 2026 at 17:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the latest Oracle MySQL Connector/C++ patch or upgrade to a supported release that contains the fix.
  • If an immediate upgrade is not feasible, restrict network exposure of the connector by implementing firewall rules or network segmentation to prevent unauthenticated traffic from reaching it.
  • Monitor the connector application for signs of hangs or crashes and consider implementing application‑level rate limiting or resource caps to mitigate potential DoS impact.

Generated by OpenCVE AI on August 4, 2026 at 17:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated Network-Based Denial of Service in Oracle MySQL Connector/C++ 9.7.x

Tue, 04 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Connector/C++ Crash in Oracle MySQL Connectors 9.7.0-9.7.1
Weaknesses CWE-770

Thu, 30 Jul 2026 16:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via Connector/C++ Crash in Oracle MySQL Connectors 9.7.0-9.7.1
Weaknesses CWE-770

Tue, 28 Jul 2026 23:30:00 +0000

Type Values Removed Values Added
Title MySQL Connector/C++ Denial of Service via Unauthenticated Network Access
Weaknesses CWE-770

Fri, 24 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Title MySQL Connector/C++ Denial of Service via Unauthenticated Network Access
Weaknesses CWE-770

Thu, 23 Jul 2026 12:15:00 +0000

Type Values Removed Values Added
First Time appeared Oracle mysql Connector/c
Oracle mysql Connectors
Vendors & Products Oracle mysql Connector/c
Oracle mysql Connectors

Tue, 21 Jul 2026 21:45:00 +0000

Type Values Removed Values Added
Description Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
First Time appeared Oracle
Oracle mysql Connector\/c\+\+
CPEs cpe:2.3:a:oracle:mysql_connector\/c\+\+:*:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle mysql Connector\/c\+\+
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Oracle Mysql Connector/c Mysql Connector\/c\+\+ Mysql Connectors
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-07-23T15:06:08.886Z

Reserved: 2026-07-08T15:51:40.518Z

Link: CVE-2026-60180

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T17:45:03Z

Weaknesses

No weakness.