cve-2026-71079

{
  "cve": "CVE-2026-71079",
  "enrichment": {
    "affected": [
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "semver",
              "value": "26.7.0"
            }
          }
        ],
        "enrichment": {
          "confidence": 95.0,
          "confidence_source": "inferred",
          "scores": [
            {
              "score": 95.0,
              "source": "inferred"
            },
            {
              "score": 100.0,
              "source": "matching"
            }
          ]
        },
        "product": "mysql_connector/odbc",
        "vendor": "oracle"
      },
      {
        "configurations": [
          {
            "platform": null,
            "status": "affected",
            "versions": {
              "scheme": "semver",
              "value": "26.7.0"
            }
          }
        ],
        "enrichment": {
          "confidence": 100.0,
          "confidence_source": "cna",
          "scores": [
            {
              "score": 100.0,
              "source": "cna"
            }
          ]
        },
        "original": {
          "product": "MySQL Connectors",
          "source": "cna",
          "vendor": "Oracle Corporation"
        },
        "product": "mysql_connectors",
        "vendor": "oracle_corporation"
      }
    ],
    "created": "2026-08-19T05:00:04.452801+00:00",
    "updated": "2026-08-28T21:45:03.695007+00:00",
    "vendors": [
      "oracle",
      "oracle$PRODUCT$mysql_connector/odbc",
      "oracle_corporation",
      "oracle_corporation$PRODUCT$mysql_connectors"
    ]
  },
  "epss": {
    "score": 0.0037
  },
  "mitre": {
    "cpes": [
      "cpe:2.3:a:oracle:mysql_connector\\/odbc:26.7.0:*:*:*:*:*:*:*"
    ],
    "created": "2026-08-18T21:03:24.517000+00:00",
    "description": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 6.5,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      },
      "cvssV4_0": {}
    },
    "mitre_repo_path": "cves/2026/71xxx/CVE-2026-71079.json",
    "references": [
      "https://www.oracle.com/security-alerts/cspuaug2026.html"
    ],
    "title": null,
    "updated": "2026-08-19T16:03:02.249000+00:00",
    "vendors": [
      "oracle",
      "oracle$PRODUCT$mysql_connector\\/odbc"
    ],
    "weaknesses": []
  },
  "nvd": {
    "cpes": [
      "cpe:2.3:a:oracle:mysql_connector\\/odbc:26.7.0:*:*:*:*:*:*:*"
    ],
    "created": "2026-08-18T21:18:08.063000+00:00",
    "description": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 6.5,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      },
      "cvssV4_0": {}
    },
    "nvd_repo_path": "2026/CVE-2026-71079.json",
    "references": [
      "https://www.oracle.com/security-alerts/cspuaug2026.html"
    ],
    "title": null,
    "updated": "2026-09-02T18:55:38.553000+00:00",
    "vendors": [
      "oracle",
      "oracle$PRODUCT$mysql_connector\\/odbc"
    ],
    "weaknesses": [
      "CWE-284"
    ]
  },
  "opencve": {
    "changes": [
      {
        "created": "2026-08-18T21:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
              "old": null
            },
            "type": "description"
          },
          {
            "details": [
              "oracle",
              "oracle$PRODUCT$mysql_connector\\/odbc"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "cpe:2.3:a:oracle:mysql_connector\\/odbc:26.7.0:*:*:*:*:*:*:*"
              ],
              "removed": []
            },
            "type": "cpes"
          },
          {
            "details": {
              "added": [
                "oracle",
                "oracle$PRODUCT$mysql_connector\\/odbc"
              ],
              "removed": []
            },
            "type": "vendors"
          },
          {
            "details": {
              "added": [
                "https://www.oracle.com/security-alerts/cspuaug2026.html"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {
                "cvssV3_1": {
                  "score": 6.5,
                  "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
                }
              },
              "removed": {},
              "updated": {}
            },
            "type": "metrics"
          }
        ],
        "id": "b94b7136-23f6-4355-b37d-f6c21836f454"
      },
      {
        "created": "2026-08-19T05:15:00+00:00",
        "data": [
          {
            "details": {
              "new": "Denial of Service via Low-Privilege Network Access in MySQL Connector/ODBC 26.7.0",
              "old": null
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "CWE-770"
              ],
              "removed": []
            },
            "type": "weaknesses"
          }
        ],
        "id": "66c608c0-8dac-4061-bf2b-03e76f065f4b"
      },
      {
        "created": "2026-08-19T15:15:00+00:00",
        "data": [
          {
            "details": {
              "new": null,
              "old": "Denial of Service via Low-Privilege Network Access in MySQL Connector/ODBC 26.7.0"
            },
            "type": "title"
          },
          {
            "details": {
              "added": [],
              "removed": [
                "CWE-770"
              ]
            },
            "type": "weaknesses"
          }
        ],
        "id": "6e3bf2f4-98bc-4ef5-b095-8acd443be5de"
      },
      {
        "created": "2026-08-19T16:30:00+00:00",
        "data": [
          {
            "details": {
              "added": [
                "CWE-284"
              ],
              "removed": []
            },
            "type": "weaknesses"
          }
        ],
        "id": "7aff07fd-c943-4aa3-b711-a1c22299c439"
      },
      {
        "created": "2026-08-19T22:00:00+00:00",
        "data": [
          {
            "details": {
              "new": "Denial of Service in Oracle MySQL Connector/ODBC 26.7.0",
              "old": null
            },
            "type": "title"
          }
        ],
        "id": "79b0d482-0357-4885-b7a4-1a49ca5d7dcb"
      },
      {
        "created": "2026-08-20T06:45:00+00:00",
        "data": [
          {
            "details": {
              "new": null,
              "old": "Denial of Service in Oracle MySQL Connector/ODBC 26.7.0"
            },
            "type": "title"
          }
        ],
        "id": "d091bfd3-b696-4bf7-9929-f69f5fdf841f"
      },
      {
        "created": "2026-08-20T19:30:00+00:00",
        "data": [
          {
            "details": {
              "new": "Denial of Service via MySQL Connector/ODBC Crash Exploit",
              "old": null
            },
            "type": "title"
          }
        ],
        "id": "2647ef22-f382-43dc-b030-455fc1ae5918"
      },
      {
        "created": "2026-08-21T13:00:00+00:00",
        "data": [
          {
            "details": [
              "oracle$PRODUCT$mysql_connector/odbc",
              "oracle_corporation",
              "oracle_corporation$PRODUCT$mysql_connectors"
            ],
            "type": "first_time"
          },
          {
            "details": {
              "added": [
                "oracle$PRODUCT$mysql_connector/odbc",
                "oracle_corporation",
                "oracle_corporation$PRODUCT$mysql_connectors"
              ],
              "removed": []
            },
            "type": "vendors"
          }
        ],
        "id": "2005d8c8-9142-4b57-bd8f-d8d0d1ff5fee"
      },
      {
        "created": "2026-08-27T18:00:00+00:00",
        "data": [
          {
            "details": {
              "new": "mysql-connector-odbc: MySQL Connector/ODBC: Denial of Service via network access by a low privileged attacker",
              "old": "Denial of Service via MySQL Connector/ODBC Crash Exploit"
            },
            "type": "title"
          },
          {
            "details": {
              "added": [
                "CWE-770"
              ],
              "removed": []
            },
            "type": "weaknesses"
          },
          {
            "details": {
              "added": [
                "https://nvd.nist.gov/vuln/detail/CVE-2026-71079",
                "https://www.cve.org/CVERecord?id=CVE-2026-71079"
              ],
              "removed": []
            },
            "type": "references"
          },
          {
            "details": {
              "added": {},
              "removed": {},
              "updated": {
                "threat_severity": {
                  "new": "Moderate",
                  "old": null
                }
              }
            },
            "type": "metrics"
          }
        ],
        "id": "f5232c35-eeed-418d-a4fd-5a86c4b3c6b0"
      }
    ],
    "cpes": {
      "data": [
        "cpe:2.3:a:oracle:mysql_connector\\/odbc:26.7.0:*:*:*:*:*:*:*"
      ],
      "providers": [
        "mitre",
        "nvd"
      ]
    },
    "created": {
      "data": "2026-08-18T21:03:24+00:00",
      "provider": "redhat"
    },
    "description": {
      "data": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
      "provider": "mitre"
    },
    "metrics": {
      "cvssV2_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_0": {
        "data": {},
        "provider": null
      },
      "cvssV3_1": {
        "data": {
          "score": 6.5,
          "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
        },
        "provider": "mitre"
      },
      "cvssV4_0": {
        "data": {},
        "provider": null
      },
      "epss": {
        "data": {
          "score": 0.0037
        },
        "provider": "first"
      },
      "kev": {
        "data": {},
        "provider": null
      },
      "ssvc": {
        "data": {},
        "provider": null
      },
      "threat_severity": {
        "data": "Moderate",
        "provider": "redhat"
      }
    },
    "references": {
      "data": [
        "https://nvd.nist.gov/vuln/detail/CVE-2026-71079",
        "https://www.cve.org/CVERecord?id=CVE-2026-71079",
        "https://www.oracle.com/security-alerts/cspuaug2026.html"
      ],
      "providers": [
        "mitre",
        "nvd",
        "redhat"
      ]
    },
    "title": {
      "data": "mysql-connector-odbc: MySQL Connector/ODBC: Denial of Service via network access by a low privileged attacker",
      "provider": "redhat"
    },
    "updated": {
      "data": "2026-08-21T12:32:02.983126+00:00",
      "provider": "enrichment"
    },
    "vendors": {
      "data": [
        "oracle",
        "oracle$PRODUCT$mysql_connector/odbc",
        "oracle$PRODUCT$mysql_connector\\/odbc",
        "oracle_corporation",
        "oracle_corporation$PRODUCT$mysql_connectors"
      ],
      "providers": [
        "mitre",
        "nvd",
        "enrichment"
      ]
    },
    "weaknesses": {
      "data": [
        "CWE-284",
        "CWE-770"
      ],
      "providers": [
        "nvd",
        "redhat"
      ]
    }
  },
  "redhat": {
    "cpes": [],
    "created": "2026-08-18T21:03:24+00:00",
    "description": "Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC).   The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).",
    "metrics": {
      "cvssV2_0": {},
      "cvssV3_0": {},
      "cvssV3_1": {
        "score": 6.5,
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      },
      "threat_severity": "Moderate"
    },
    "redhat_repo_path": "2026/CVE-2026-71079.json",
    "references": [
      "https://nvd.nist.gov/vuln/detail/CVE-2026-71079",
      "https://www.cve.org/CVERecord?id=CVE-2026-71079",
      "https://www.oracle.com/security-alerts/cspuaug2026.html"
    ],
    "title": "mysql-connector-odbc: MySQL Connector/ODBC: Denial of Service via network access by a low privileged attacker",
    "updated": "2026-08-18T21:03:24+00:00",
    "vendors": [],
    "weaknesses": [
      "CWE-770"
    ]
  }
}