Denial of Service in MySQL Connector/ODBC

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Oracle

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-71084

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	mysql_connectors	26.7.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle MySQL Connectors, specifically version 26.7.0. An unauthenticated attacker with local access to the system running MySQL Connectors can exploit it to cause a denial of service (DOS) by crashing the application repeatedly or making it hang. It may also allow unauthorized read access to some data within MySQL Connectors.

Impact Analysis

If you use MySQL Connectors version 26.7.0, an attacker with local access could disrupt your MySQL Connector service, causing downtime or crashes. This could affect applications relying on the connector for database operations.

Mitigation Strategies

Upgrade MySQL Connector/ODBC to a version unaffected by this vulnerability. If version 26.7.0 is in use, apply the latest patch from Oracle. Restrict network access to the MySQL Connectors infrastructure to trusted users only.

Hi! I’m here to help you understand CVE-2026-71084. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70