PT-2026-3691 · Oracle+3 · Oracle Mysql+3

Published 2026-01-20 · Updated 2026-04-01 · CVE-2026-21941

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description An issue exists in the Server: Optimizer component of Oracle MySQL Server that allows a high-privileged attacker with network access to cause a denial-of-service (DOS) condition, resulting in a hang or frequent crashes of the MySQL Server. The vulnerability is easily exploitable through multiple network protocols.

Recommendations Oracle MySQL versions 8.0.0 through 8.0.44 should be updated. Oracle MySQL versions 8.4.0 through 8.4.7 should be updated. Oracle MySQL versions 9.0.0 through 9.5.0 should be updated.

Fix

DoS

RCE

Resource Exhaustion

Weakness Enumeration

CWE-20

CWE-400

Related Identifiers

ALSA-2026:4162

ALSA-2026:4828

ALSA-2026:5580

ALSA-2026:5640

ALSA-2026:6391

AZL-74946

AZL-75002

BDU:2026-00691

CVE-2026-21941

OESA-2026-1196

RHSA-2026:4162

RHSA-2026:4828

RHSA-2026:5580

RHSA-2026:5640

RHSA-2026:6391

USN-7994-1

USN-8006-1

Affected Products

Linuxmint

Mysql Server

Oracle Mysql

Ubuntu

References · 68

• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21968 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-5640.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-6391.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-75002 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4828.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:4162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53045 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7994-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:5580 · Vendor Advisory