PT-2026-3698 · Oracle+3 · Mysql 8.4+5

Ryan Brothers · Published 2026-01-20 · Updated 2026-04-01 · CVE-2026-21948

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description A flaw exists in the Optimizer component of the MySQL Server product. A highly privileged attacker with network access through multiple protocols can exploit this issue to cause a denial-of-service condition, leading to hangs or frequent crashes of the MySQL Server.

Recommendations Update Oracle MySQL to a version later than 8.0.44. Update Oracle MySQL to a version later than 8.4.7. Update Oracle MySQL to a version later than 9.5.0.

Fix

DoS

RCE

Resource Exhaustion

Weakness Enumeration

CWE-20

CWE-400

Related Identifiers

ALSA-2026:4162

ALSA-2026:4828

ALSA-2026:5580

ALSA-2026:5640

ALSA-2026:6391

AZL-74940

AZL-75005

BDU:2026-00690

CVE-2026-21948

OESA-2026-1196

RHSA-2026:4162

RHSA-2026:4828

RHSA-2026:5580

RHSA-2026:5640

RHSA-2026:6391

USN-7994-1

USN-8006-1

Affected Products

Linuxmint

Mysql 8.0

Mysql 8.4

Mysql 9.0

Mysql Server

Ubuntu

References · 68

• https://ubuntu.com/security/CVE-2026-21941 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-21948 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2026-5580.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-21968 · Security Note
• https://errata.almalinux.org/9/ALSA-2026-5640.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-8006-1 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2026-6391.html · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:4162 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-21936 · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2026-4828.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-53045 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7994-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:5580 · Vendor Advisory