VDB

CVE-2026-71084

CVE-2026-71084 PUBLISHED CVSS 6.8 MEDIUM

Reported by oracle · Published August 18, 2026

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

Risk Scores

CVSS 3.1
6.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Affected Products

VendorProductVersions
Oracle CorporationMySQL Connectors26.7.0
oraclemysql_connector\/odbc
Oracle CorporationMySQL Connectors26.7.0, 26.7.0

Timeline

  • Aug 18, 2026 CVE Published
  • Aug 19, 2026 EPSS Score
  • Aug 20, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Sep 2, 2026 CVE Updated
  • Sep 3, 2026 EPSS Score
  • Sep 4, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›