Source: mysql-connector-python
Version: 26.7.0-1
X-Debbugs-CC: [email protected]
Severity: grave
Tags: security upstream

Hi,

The following vulnerability was published for mysql-connector-python.

CVE-2026-83404[0]:
| Vulnerability in the MySQL Connectors product of Oracle MySQL
| (component: Connector/Python).   The supported version that is
| affected is 26.7.0. Easily exploitable vulnerability allows
| unauthenticated attacker with network access via multiple protocols
| to compromise MySQL Connectors.  Successful attacks of this
| vulnerability can result in  unauthorized access to critical data or
| complete access to all MySQL Connectors accessible data. CVSS 3.1
| Base Score 7.5 (Confidentiality impacts).  CVSS Vector:
| (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-83404
    https://www.cve.org/CVERecord?id=CVE-2026-83404

Regards,
Salvatore

Reply via email to