Source: mysql-connector-python Version: 26.7.0-1 X-Debbugs-CC: [email protected] Severity: grave Tags: security upstream
Hi, The following vulnerability was published for mysql-connector-python. CVE-2026-83404[0]: | Vulnerability in the MySQL Connectors product of Oracle MySQL | (component: Connector/Python). The supported version that is | affected is 26.7.0. Easily exploitable vulnerability allows | unauthenticated attacker with network access via multiple protocols | to compromise MySQL Connectors. Successful attacks of this | vulnerability can result in unauthorized access to critical data or | complete access to all MySQL Connectors accessible data. CVSS 3.1 | Base Score 7.5 (Confidentiality impacts). CVSS Vector: | (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2026-83404 https://www.cve.org/CVERecord?id=CVE-2026-83404 Regards, Salvatore

