CVE-2026-83404
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
- Risk score
- 67/100
- CVSS
- 7.5 v3.1
- Exploit chance (30 days)
- 0.4%
- Published
- 20 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A high-severity vulnerability in MySQL Connectors' Connector/Python component allows unauthenticated attackers to access critical data. An attacker could gain complete access to all accessible data.
- Affected
- {'product': 'MySQL Connectors', 'package': 'Connector/Python', 'version': '26.7.0'}
- Fix
- Check the linked advisory for the fix, as none is provided
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 7.5 high
- Remotely exploitable without logging in
- On your watchlist: python
References
Original description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Last activity 20 Oct 2026. Patch Forecast updates every hour.