CVE-2026-71084: Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. in Oracle Corporation MySQL Connectors
CVE-2026-71084 is a vulnerability in Oracle MySQL Connectors, specifically affecting version 26.7.0 of Connector/ODBC. It allows an unauthenticated attacker with logon access to the infrastructure where MySQL Connectors run to cause a denial of service (hang or repeated crash) and unauthorized read access to some accessible data. The CVSS 3.1 base score is 6.8, indicating a medium severity with impacts on confidentiality and availability.
AI Analysis
Technical Summary
This vulnerability in Oracle MySQL Connectors (Connector/ODBC component) version 26.7.0 permits an unauthenticated attacker who has logon access to the infrastructure hosting the connectors to compromise the MySQL Connectors. Exploitation can lead to a complete denial of service by causing hangs or repeated crashes and unauthorized read access to a subset of data accessible through the connectors. The CVSS vector indicates local attack vector with low complexity, no privileges required, no user interaction, and impacts confidentiality (low) and availability (high).
Potential Impact
Successful exploitation allows an attacker to cause a complete denial of service of MySQL Connectors and gain unauthorized read access to some data accessible by the connectors. This impacts the availability and confidentiality of the affected system component but does not affect integrity.
Mitigation Recommendations
Oracle has released a Critical Security Patch Update that addresses this vulnerability. Customers are strongly advised to apply the available security patches without delay to remediate this issue. The vendor advisory does not indicate any 'no action required' status; therefore, patching is the recommended mitigation. Refer to the Oracle Critical Security Patch Update advisory dated August 2026 for patch availability and installation instructions.
CVE-2026-71084: Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. in Oracle Corporation MySQL Connectors
Description
CVE-2026-71084 is a vulnerability in Oracle MySQL Connectors, specifically affecting version 26.7.0 of Connector/ODBC. It allows an unauthenticated attacker with logon access to the infrastructure where MySQL Connectors run to cause a denial of service (hang or repeated crash) and unauthorized read access to some accessible data. The CVSS 3.1 base score is 6.8, indicating a medium severity with impacts on confidentiality and availability.
CVSS v3.1
Score 6.8medium
Affected software
Oracle Corporation
MySQL Connectors
pkg:maven/com.mysql/mysql-connector-odbcRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Oracle MySQL Connectors (Connector/ODBC component) version 26.7.0 permits an unauthenticated attacker who has logon access to the infrastructure hosting the connectors to compromise the MySQL Connectors. Exploitation can lead to a complete denial of service by causing hangs or repeated crashes and unauthorized read access to a subset of data accessible through the connectors. The CVSS vector indicates local attack vector with low complexity, no privileges required, no user interaction, and impacts confidentiality (low) and availability (high).
Potential Impact
Successful exploitation allows an attacker to cause a complete denial of service of MySQL Connectors and gain unauthorized read access to some data accessible by the connectors. This impacts the availability and confidentiality of the affected system component but does not affect integrity.
Mitigation Recommendations
Oracle has released a Critical Security Patch Update that addresses this vulnerability. Customers are strongly advised to apply the available security patches without delay to remediate this issue. The vendor advisory does not indicate any 'no action required' status; therefore, patching is the recommended mitigation. Refer to the Oracle Critical Security Patch Update advisory dated August 2026 for patch availability and installation instructions.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- oracle
- Date Reserved
- 2026-08-04T22:06:34.616Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://www.oracle.com/security-alerts/cspuaug2026.html","vendor":"Oracle"}]
Threat ID: 6a84cccdc6e8be0332c38fd0
Added to database: 08/18/2026, 21:21:17 UTC
Last enriched: 09/11/2026, 12:19:06 UTC
Last updated: 10/02/2026, 02:46:06 UTC
Views: 41
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.