CVE-2026-101678
connector/j: MySQL Connector/J: Denial of Service via network access
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 21, 2026
Updated · November 2, 2026
Description
A flaw was found in MySQL Connector/J. An unauthenticated remote attacker could exploit this vulnerability across the network by enticing a user to interact with malicious requests. A successful attack allows the attacker to cause a partial Denial of Service (DoS), leading to temporary service disruption for applications using the connector.
Statement
This vulnerability is rated as Moderate severity because exploitation requires user interaction and only results in a partial denial of service without compromising system confidentiality or integrity. In Red Hat environments, MySQL Connector/J is primarily utilized as a client-side JDBC driver within Java applications and middleware to communicate with MySQL database instances. Because the issue cannot be triggered autonomously and does not allow unauthorized data access or code execution, the impact is confined to transient client availability disruptions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CWE-770 · Allocation of Resources Without Limits or Throttling