CVE-2026-71084
Reported by oracle · Published August 18, 2026
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | MySQL Connectors | 26.7.0 |
| oracle | mysql_connector\/odbc | |
| Oracle Corporation | MySQL Connectors | 26.7.0, 26.7.0 |
Timeline
- Aug 18, 2026 CVE Published
- Aug 19, 2026 EPSS Score
- Aug 20, 2026 Coalition ESS Score
- Aug 24, 2026 EPSS Score
- Sep 2, 2026 CVE Updated
- Sep 3, 2026 EPSS Score
- Sep 4, 2026 Security Advisory
References
- Oracle Advisory vendor-advisory