Skip to content
OracleCVE-2026-71073

MySQL Connectors: denial of service via Connector/ODBC

Medium5.5CVE-2026-71073 · Published Aug 18, 2026 · updated Sep 2, 2026

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H).

Oracle advisory

Affected versions

PackageAffectedFixed in
MySQL Connectors
Product
<= 26.7.0No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-404

More Oracle advisories

All Oracle
Advisory
Helidon: data tampering via Imperative Web Server
High8.6Aug 18
Helidon: data tampering via Imperative Web Server
Critical9.9Aug 18
Helidon: data tampering via Imperative Web Server
High8.3Aug 18
Helidon: flaw in Imperative Web Server
Medium5.3Aug 18
Helidon: data tampering via Imperative Web Server
High7.3Aug 18
Helidon: denial of service via Imperative Web Server
High7.5Aug 18

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.