CVE catalog

CVE-2026-71079

UBUNTU-CVE-2026-71079

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Aug 18, 2026, 9:03:24 PM UTC
Updated: Sep 2, 2026, 4:23:50 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.37% · Oct 25, 2026

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	mysql-connector-java	14.04	`5.1.25-1`	vulnerable
Ubuntu	mysql-connector-java	14.04	`5.1.26-1`	vulnerable
Ubuntu	mysql-connector-java	14.04	`5.1.27-1`	vulnerable
Ubuntu	mysql-connector-java	14.04	`5.1.28-1`	vulnerable
Ubuntu	mysql-connector-java	16.04	`5.1.32-1`	vulnerable
Ubuntu	mysql-connector-java	16.04	`5.1.38-1`	vulnerable
Ubuntu	mysql-connector-java	18.04	`5.1.42-1`	vulnerable
Ubuntu	mysql-connector-java	18.04	`5.1.44-1`	vulnerable
Ubuntu	mysql-connector-java	18.04	`5.1.45-1`	vulnerable
Cpe	mysql_connector\/odbc	Not reported	Not reported	unknown

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 9:38:44 PM UTC

References

[FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]