PT-2026-3686 · Oracle+3 · Mysql 8.4+5

Published 2026-01-20 · Updated 2026-04-01 · CVE-2026-21936

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description A flaw exists in the InnoDB component of Oracle MySQL Server that could allow a high-privileged attacker with network access to cause a denial-of-service condition, resulting in a hang or frequent crashes of the MySQL Server. Successful exploitation can lead to an unauthorized ability to disrupt service.

Recommendations Update Oracle MySQL to a version later than 8.0.44. Update Oracle MySQL to a version later than 8.4.7. Update Oracle MySQL to a version later than 9.5.0.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2026:4162

ALSA-2026:4828

ALSA-2026:5580

ALSA-2026:5640

ALSA-2026:6391

AZL-74952

AZL-74996

BDU:2026-00679

CVE-2026-21936

OESA-2026-1196

RHSA-2026:4162

RHSA-2026:4828

RHSA-2026:5580

RHSA-2026:5640

RHSA-2026:6391

USN-7994-1

USN-8006-1

Affected Products

Linuxmint

Mysql Server

Mysql 8.0

Mysql 8.4

Mysql 9.0

Ubuntu

References · 69

• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-21936 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21968 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-5640.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-6391.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:4162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4828.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53045 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7994-1 · Vendor Advisory