MySQL Connectors vulnerabilities

13 known vulnerabilities in MySQL Connectors from Oracle. 13 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  MySQL Connectors: Missing Authentication for Critical Functionality

  CVE-2026-83404Oct 20, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compro

• 8.1 High severity

  MySQL Connectors: Improper Access Control

  CVE-2026-101768Oct 20, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). The supported version that is affected is 26.7.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise MySQL Connec

• 7.1 High severity

  MySQL Connectors: Missing Authentication for Critical Functionality

  CVE-2026-60623Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compro

• 7.7 High severity

  MySQL Connectors: Missing Authentication for Critical Functionality

  CVE-2026-60586Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi

• 7.4 High severity

  MySQL Connectors: Improper Access Control

  CVE-2026-60317Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com

• 8.5 High severity

  MySQL Connectors: Improper Access Control

  CVE-2026-60193Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to comp

• 8.1 High severity

  MySQL Connectors: Improper Access Control

  CVE-2026-60192Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com

• 7.5 High severity

  MySQL Connectors: Uncontrolled Resource Consumption

  CVE-2026-60180Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compr

• 7.4 High severity

  MySQL Connectors: Improper Access Control

  CVE-2026-60179Jul 21, 2026Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/C++). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com

• 7.5 High severity

  MySQL Connectors: Incorrect Default Permissions

  CVE-2025-30706Apr 15, 2025Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compro

• 7.5 High severity

  MySQL Connectors: Missing Authentication for Critical Functionality

  CVE-2024-21272Oct 15, 2024Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols

• 8.3 High severity

  MySQL Connectors: Improper Access Control

  CVE-2023-22102Oct 17, 2023Oracle

  Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to c

• 8.2 High severity

  Node: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2022-21824Feb 24, 2022Node.jsEPSS 21.5%

  Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could b