CVE-2026-61082
CVE-2026-61082 key facts
- CISA KEV
- Not listed (catalogue checked )
- Highest advisory rating
- High
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N· base score 6.5, scored by oracleAttack vector: network. Attack complexity: low. Privileges required: none. User interaction: required. Scope: unchanged. Confidentiality impact: high. Integrity impact: none. Availability impact: none.- Weakness
- Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access t
- EPSS
- 0.19% chance of exploitation in the next 30 days (8th percentile). FIRST EPSS, .
- CISA SSVC
- Exploitation: none observed. Automatable: no. Technical impact: total. CISA, .
- Vendor advisories
- 1 from NetApp
- Assigned by
- oracle (CNA)
- CVE record published
- Listed by VulniPulse
Ratings, versions and fixes are quoted from the vendor advisories that cover only CVE-2026-61082; each belongs to its advisory, not to every product listed. How records are collected and checked.
Description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Text from the CVE.org record (oracle).
Vendor advisories for CVE-2026-61082
NetApp
1 advisory- Advisory severityHigh7.7
High [CVE-2026-60586 +3] July 2026 MySQL Connector/J Vulnerabilities in NetApp Products
NTAP-20260731-0018Source published Source updated
This bulletin covers 4 CVEs. The products, versions, score and guidance below describe the bulletin; check its source for applicability to this specific CVE.
MySQL Connector/J versions 9.7.0 through 9.7.1 are susceptible to vulnerabilities that can allow unauthenticated and low privileged attackers with network access via multiple protocols to compromise MySQL Connectors. Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details. Successful attacks of these vulnerabilities can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data, unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data or unauthorized ability to cause a partial denial of service (partial DOS) or a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. NetApp reports that one or more additional products remain under…
- Affected products in this advisory
- No product details extracted. Check the source bulletin.
- Source-reported affected versions
- 9.7.0
- 9.7.1
- Source-reported fixed versions
- No fixed-version detail extracted. This does not mean no fix exists.
- Mitigation guidance
- Refer to “Oracle Critical Patch Update Advisory - July 2026” for additional details.
References
- CVE-2026-61082 recordCVE.org
- CVE-2026-61082 detailNVD
- Oracle Advisoryvendor-advisory
Timeline
- CVE record published
- CVE record last updated
- First vendor advisory listed by VulniPulse
More NetApp advisories
CVE-2026-114583Nov 6, 2026CPython Vulnerability in NetApp ProductsCVE-2026-72493Nov 6, 2026Linux Kernel Vulnerability in NetApp ProductsCVE-2026-101308Nov 6, 2026FreeBSD Vulnerability in NetApp ProductsCVE-2026-111943Nov 6, 2026Golang Vulnerability in NetApp ProductsCVE-2026-101307Nov 6, 2026FreeBSD Vulnerability in NetApp ProductsCVE-2026-100075Nov 6, 2026Linux Kernel Vulnerability in NetApp Products
Get an email when NetApp publishes the next one.
See NetApp's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
