CVE-2026-101768

A flaw was found in MySQL Connector/J. An unauthenticated remote attacker with network access via Hypertext Transfer Protocol (HTTP) could exploit this vulnerability to compromise the host application process. A successful attack allows the attacker to take over the application process, potentially leading to unauthorized data modification, sensitive information disclosure, or service disruption.

This vulnerability is rated as Important due to the severe potential impact, where a remote attacker could achieve complete compromise of the underlying application environment despite high attack complexity. Red Hat Enterprise Linux packages are not affected by this issue, as the supported releases of mysql-connector-java do not contain the vulnerable upstream code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.