CVE Database›CVE-2026-101678

CVE-2026-101678

connector/j: MySQL Connector/J: Denial of Service via network access

Loading…

Severity

Moderate

Red Hat Product Security

4.3

CVSS 3.1

Review impact separately from score.

Published · October 21, 2026

Updated · November 2, 2026

Description

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability across the network by enticing a user to interact with malicious requests. A successful attack allows the attacker to cause a partial Denial of Service (DoS), leading to temporary service disruption for applications using the connector.

Statement

This vulnerability is rated as Moderate severity because exploitation requires user interaction and only results in a partial denial of service without compromising system confidentiality or integrity. In Red Hat environments, MySQL Connector/J is primarily utilized as a client-side JDBC driver within Java applications and middleware to communicate with MySQL database instances. Because the issue cannot be triggered autonomously and does not allow unauthorized data access or code execution, the impact is confined to transient client availability disruptions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

CWE-770 · Allocation of Resources Without Limits or Throttling