CVE-2026-71073

Analyzed Analyzed - Analysis Complete

MySQL Connector/ODBC Denial of Service Vulnerability

Publication date: 2026-08-18

Last updated on: 2026-09-02

Assigner: Oracle

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-09-02

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-71073

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	mysql_connector/odbc	26.7.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-404	The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle MySQL Connectors, specifically version 26.7.0. It allows an unauthenticated attacker with local system access to cause a denial of service (DOS) by crashing the MySQL Connectors application repeatedly. The attack requires some form of human interaction beyond just the attacker's actions.

Detection Guidance

Detection requires monitoring for crashes or hangs in MySQL Connectors (ODBC) version 26.7.0. Check logs for repeated crashes or unresponsive processes. No specific commands are provided in the context.

Impact Analysis

If you use MySQL Connectors version 26.7.0, an attacker with local access to your system could exploit this flaw to crash the application, leading to service disruptions and downtime for applications relying on MySQL Connectors.

Compliance Impact

This vulnerability causes denial-of-service (DoS) conditions in MySQL Connectors, leading to system unavailability. For GDPR, this could impact data processing operations requiring availability. HIPAA requires availability of ePHI systems; disruptions may violate compliance.

Mitigation Strategies

Upgrade MySQL Connectors to a version unaffected by this vulnerability. If upgrading is not possible, restrict access to the infrastructure where MySQL Connectors executes to reduce exposure.

Hi! I’m here to help you understand CVE-2026-71073. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70