Threats affecting pkg:maven/com.mysql/mysql-connector

CVE-2026-83404 is a vulnerability in Oracle MySQL Connectors, specifically affecting version 26.7.0. It allows an unauthenticated attacker with network access via multiple protocols to gain unauthorized access to critical data or all accessible data in MySQL Connectors. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with a significant confidentiality impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which contains patches for many products including MySQL Connectors. Users are strongly advised to apply the available patches promptly to mitigate the risk.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).

CVE-2026-60180 is a high-severity vulnerability in Oracle MySQL Connectors, specifically affecting versions 9.7.0 through 9.7.1. It allows an unauthenticated attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the MySQL Connectors. The vulnerability impacts availability but does not affect confidentiality or integrity.

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).