PT-2026-3687 · Oracle+3 · Oracle Mysql+3

Published 2026-01-20 · Updated 2026-04-01 · CVE-2026-21937

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description A flaw exists in the Server: DDL component of Oracle MySQL Server that allows a high-privileged attacker with network access, through multiple protocols, to cause a denial-of-service condition. Successful exploitation can lead to a hang or frequent crashes of the MySQL Server.

Recommendations Oracle MySQL versions 8.0.0 through 8.0.44 should be updated. Oracle MySQL versions 8.4.0 through 8.4.7 should be updated. Oracle MySQL versions 9.0.0 through 9.5.0 should be updated.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2026:4162

ALSA-2026:4828

ALSA-2026:5580

ALSA-2026:5640

ALSA-2026:6391

AZL-74955

AZL-74999

BDU:2026-00678

CVE-2026-21937

OESA-2026-1196

RHSA-2026:4162

RHSA-2026:4828

RHSA-2026:5580

RHSA-2026:5640

RHSA-2026:6391

USN-7994-1

USN-8006-1

Affected Products

Linuxmint

Mysql Server

Oracle Mysql

Ubuntu

References · 68

• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-74955 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21968 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-21937 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21968 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-5640.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-6391.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:4162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4828.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53045 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7994-1 · Vendor Advisory