{"schemaVersion":3,"id":"CVE-2026-61082","aliases":["UBUNTU-CVE-2026-61082"],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).  Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).","dates":{"published":"2026-07-21T21:38:02.687Z","modified":"2026-07-29T19:26:42.805Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.5,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","exploitability":7.2,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.5,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00191,"percentile":0.08282,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0.044000000000000004,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00147},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00191,"percentile":0.08282}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00147,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00191,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00191,"percentile":0.08282}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-200","name":"Exposure of Sensitive Information to an Unauthorized Actor","description":"The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/200.html"},{"id":"CWE-285","name":"Improper Authorization","description":"The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/285.html"},{"id":"CWE-352","name":"Cross-Site Request Forgery (CSRF)","description":"The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.","type":"weakness","status":"Stable","abstraction":"Compound","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/352.html"},{"id":"CWE-601","name":"URL Redirection to Untrusted Site ('Open Redirect')","description":"The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Low","url":"https://cwe.mitre.org/data/definitions/601.html"}],"affected":[{"vendor":"ubuntu","product":"mysql-connector-java","name":"mysql-connector-java","label":"mysql-connector-java","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/mysql-connector-java","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"oracle corporation","product":"mysql connectors","name":"MySQL Connectors","label":"mysql connectors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 9.7.0, ≤ 9.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 9.7.0, ≤ 9.7.1","eol":null,"hubHref":"/vendor/oracle_corporation/mysql_connectors"},{"vendor":"oracle","product":"mysql_connector\\/j","name":"mysql connector\\/j","label":"mysql_connector\\/j","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"9.7.0","noFixRecorded":false,"fixedIn":null},{"text":"9.7.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"9.7.0 | 9.7.1","eol":null,"hubHref":"/vendor/oracle/mysql_connectorj"}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.oracle.com/security-alerts/cpujul2026.html","label":"www.oracle.com/security-alerts/cpujul2026.html","hostname":"www.oracle.com","tags":["Vendor Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-61082","label":"ubuntu.com/security/CVE-2026-61082","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61082","label":"www.cve.org/CVERecord?id=CVE-2026-61082","hostname":"www.cve.org","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-07-21T21:38:02.687Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-29T19:26:42.805Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":26,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T18:46:46.905Z","stale":false,"partial":false}}