Dashboard / CVE-2026-71084

CVE-2026-71084

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 49/100
Published: 2026-08-18 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Auth No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: None
UI: None
S: Unchanged
C: Low
I: None
A: High

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
oracle mysql_connector\/odbc 26.7.0

References & Advisories (1)

Bug Bounty Relevance

49 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

EPSS — Exploitation Probability

0.17%
Raw Score 0.001690
Percentile 6.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00169
2026-10-28
0.00169

Intelligence Sources

nvd ref →

External Links