EUVD-2026-62029
GHSA-vpv7-xq2h-vxfp
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Local attack vector confirmed by description; no MySQL credentials required; high availability impact from repeatable crash; no integrity impact observed.
Primary rating from Vendor (oracle).
CVSS VectorVendor: oracle
Lifecycle Timeline
1DescriptionCVE.org
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. CVSS 3.1 Base Score 6.8 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H).
AnalysisAI
Local exploitation of MySQL Connector/ODBC 26.7.0 on Oracle MySQL allows any user with OS-level logon to the affected infrastructure to crash or hang the connector process and read a subset of accessible data. The attack requires no authentication to MySQL Connectors itself and no user interaction, making it trivially executable by any local user or process on the host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have local OS-level logon access (interactive or service account) to the infrastructure host where MySQL Connector/ODBC 26.7.0 is installed and running - this is the primary gating condition per AV:L in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The overall risk profile is moderate. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply Oracle's Critical Patch Update for August 2026, which addresses this vulnerability; consult the advisory at https://www.oracle.com/security-alerts/cspuaug2026.html for patched version details (an exact fixed version number was not independently confirmed in the provided data). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Mysql Connector Odbc
View allNetwork-exploitable denial-of-service in Oracle MySQL Connector/ODBC 26.7.0 allows low-privileged authenticated attacker
MySQL Connector/ODBC version 26.7.0 exposes a local denial-of-service condition that allows an unauthenticated attacker
Same weakness CWE-284 – Improper Access Control
View allSame technique Authentication Bypass
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today