Detections
Analytics
Oracle MySQL ODBC Connector 26.7.0 < 26.7.1 (August 2026 CSPU)
medium Nessus Plugin ID 338062
Synopsis
The remote host is affected by multiple vulnerabilities.Description
The 26.7.0 versions of MySQL Connector/ODBC installed on the remote host are affected by multiple vulnerabilities as referenced in the August 2026 CSPU advisory.- Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors and unauthorized read access to a subset of MySQL Connectors accessible data. (CVE-2026-71084)
- Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors.
(CVE-2026-71079)
- Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors.
(CVE-2026-71073)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Apply the appropriate patch according to the August 2026 Oracle Critical Security Patch Update advisory.See Also
https://www.oracle.com/docs/tech/security-alerts/cspuaug2026csaf.json
Plugin Details
Severity: Medium
ID: 338062
File Name: oracle_mysql_connectors_cspu_aug_2026.nasl
Version: 1.1
Type: Local
Agent: windows, macosx, unix
Family: Misc.
Published: 8/19/2026
Updated: 8/19/2026
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.5
Percentile: 51.69
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2026-71079
CVSS v3
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS Score Source: CVE-2026-71084
Vulnerability Information
CPE: cpe:/a:oracle:mysql_connectors
Required KB Items: installed_sw/MySQL Connector
Patch Publication Date: 8/18/2026
Vulnerability Publication Date: 8/18/2026