CVE-2026-71084

Analyzed Analyzed - Analysis Complete

Denial of Service in MySQL Connector/ODBC

Publication date: 2026-08-18

Last updated on: 2026-09-02

Assigner: Oracle

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-09-02

Generated

2026-09-08

AI Q&A

2026-08-19

EPSS Evaluated

2026-09-07

NVD

CVE-2026-71084

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	mysql_connector/odbc	26.7.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle MySQL Connectors, specifically version 26.7.0. An unauthenticated attacker with local access to the system running MySQL Connectors can exploit it to cause a denial of service (DOS) by crashing the application repeatedly or making it hang. It may also allow unauthorized read access to some data within MySQL Connectors.

Detection Guidance

This vulnerability affects MySQL Connector/ODBC version 26.7.0. Detection involves checking the installed version of MySQL Connector/ODBC on your system. Use commands like 'dpkg -l | grep mysql-connector-odbc' for Debian-based systems or 'rpm -qa | grep mysql-connector-odbc' for RPM-based systems to verify the version.

Impact Analysis

If you use MySQL Connectors version 26.7.0, an attacker with local access could disrupt your MySQL Connector service, causing downtime or crashes. This could affect applications relying on the connector for database operations.

Compliance Impact

The vulnerability allows unauthorized read access to a subset of MySQL Connectors accessible data and can cause denial of service, which may impact data confidentiality and availability. This could potentially violate GDPR's data protection requirements and HIPAA's safeguards for protected health information if exploited.

Mitigation Strategies

Upgrade MySQL Connector/ODBC to a version unaffected by this vulnerability. If version 26.7.0 is in use, apply the latest patch from Oracle. Restrict network access to the MySQL Connectors infrastructure to trusted users only.

Hi! I’m here to help you understand CVE-2026-71084. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70