Description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-08-18
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in Oracle’s MySQL Connector/ODBC 26.7.0. It allows an attacker with low privileges but network access to send specially crafted traffic through supported protocols, causing the connector to hang or repeatedly crash. The impact is a complete denial of service affecting applications that rely on the connector for database access.

Affected Systems

Oracle Corporation’s MySQL Connector/ODBC version 26.7.0 is the affected product.

Risk and Exploitability

The base CVSS score of 6.5 indicates moderate severity for availability. The EPSS score of < 1 % suggests a low likelihood of exploitation, and the vulnerability is not listed in CISA’s KEV catalog. Nonetheless, the ease of remote exploitation for low‑privilege attackers and the potential to disrupt services exposed over a network create a non‑negligible risk for organizations that run the connector in accessible environments.

Generated by OpenCVE AI on August 28, 2026 at 21:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Oracle security patch for MySQL Connector/ODBC 26.7.0 as outlined in the August 2026 security alert
  • Upgrade the connector to a version released after the advisory that incorporates the fix
  • Implement firewall or segmentation controls to restrict external network access to the Connector/ODBC services

Generated by OpenCVE AI on August 28, 2026 at 21:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 18:00:00 +0000

Type Values Removed Values Added
Title Denial of Service via MySQL Connector/ODBC Crash Exploit mysql-connector-odbc: MySQL Connector/ODBC: Denial of Service via network access by a low privileged attacker
Weaknesses CWE-770
References
Metrics threat_severity

None

 threat_severity

Moderate

Fri, 21 Aug 2026 13:00:00 +0000

Type Values Removed Values Added
First Time appeared Oracle mysql Connector/odbc
Oracle Corporation
Oracle Corporation mysql Connectors
Vendors & Products Oracle mysql Connector/odbc
Oracle Corporation
Oracle Corporation mysql Connectors

Thu, 20 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Title Denial of Service via MySQL Connector/ODBC Crash Exploit

Thu, 20 Aug 2026 06:45:00 +0000

Type Values Removed Values Added
Title Denial of Service in Oracle MySQL Connector/ODBC 26.7.0

Wed, 19 Aug 2026 22:00:00 +0000

Type Values Removed Values Added
Title Denial of Service in Oracle MySQL Connector/ODBC 26.7.0

Wed, 19 Aug 2026 16:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-284

Wed, 19 Aug 2026 15:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Low-Privilege Network Access in MySQL Connector/ODBC 26.7.0
Weaknesses CWE-770

Wed, 19 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
Title Denial of Service via Low-Privilege Network Access in MySQL Connector/ODBC 26.7.0
Weaknesses CWE-770

Tue, 18 Aug 2026 21:15:00 +0000

Type Values Removed Values Added
Description Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
First Time appeared Oracle
Oracle mysql Connector\/odbc
CPEs cpe:2.3:a:oracle:mysql_connector\/odbc:26.7.0:*:*:*:*:*:*:*
Vendors & Products Oracle
Oracle mysql Connector\/odbc
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Oracle Mysql Connector/odbc Mysql Connector\/odbc
Oracle Corporation Mysql Connectors
cve-icon MITRE

Status: PUBLISHED

Assigner: oracle

Published:

Updated: 2026-08-19T16:03:02.249Z

Reserved: 2026-08-04T22:06:34.615Z

Link: CVE-2026-71079

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-08-18T21:18:08.063

Modified: 2026-09-02T18:55:38.553

Link: CVE-2026-71079

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-18T21:03:24Z

Links: CVE-2026-71079 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-28T21:45:03Z

Weaknesses
  • CWE-284

    Improper Access Control

  • CWE-770

    Allocation of Resources Without Limits or Throttling