CVE-2026-101804

Awaiting Analysis Awaiting Analysis - Queue

Heap-based Buffer Overflow in MySQL Connector/ODBC

Publication date: 2026-10-20

Last updated on: 2026-10-22

Assigner: Oracle

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 2.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-20

Last Modified

2026-10-22

Generated

2026-11-10

AI Q&A

2026-10-21

EPSS Evaluated

2026-11-08

NVD

CVE-2026-101804

EUVD

EUVD-2026-106205

Affected Vendors & Products

Vendor	Product	Version / Range
Oracle Corporation	MySQL Connectors	26.7.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle MySQL Connectors (specifically Connector/ODBC version 26.7.1). It allows an unauthenticated attacker with local system access to potentially cause a partial denial of service (DOS) of the MySQL Connectors component. The attack requires human interaction from someone other than the attacker.

Detection Guidance

This vulnerability requires human interaction and is difficult to exploit, so detection may focus on monitoring for unusual activity in MySQL Connector/ODBC components. Check for unexpected network connections or processes related to MySQL Connectors. Review logs for any partial denial of service events or unauthorized access attempts.

Impact Analysis

If exploited, this vulnerability could lead to a partial disruption of MySQL Connectors services, causing reduced availability of the affected system. Since it requires local access and human interaction, the risk is limited but not zero.

Compliance Impact

This vulnerability has a low impact on compliance with standards like GDPR or HIPAA. It only causes partial denial of service and requires human interaction, so it does not directly lead to unauthorized data access or disclosure. However, repeated exploitation could disrupt MySQL Connectors operations, potentially affecting availability of systems handling regulated data.

Mitigation Strategies

Update MySQL Connectors to a version unaffected by this vulnerability. Since the affected version is 26.7.1, check for and apply any available patches or upgrades from Oracle.

Hi! I’m here to help you understand CVE-2026-101804. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...