MySQL Server Vulnerability in Oracle MySQL Product
CVE-2026-21929

5.3MEDIUM

Key Information:

Vendor

Oracle
Status
Mysql Server
Vendor
CVE Published:
20 January 2026

What is CVE-2026-21929?

A vulnerability has been identified in Oracle's MySQL Server that could be exploited by a low privileged attacker with network access through various protocols. This flaw has the potential to allow unauthorized users to cause MySQL Server to hang or crash repeatedly, leading to a denial of service. Affected versions range from 9.0.0 to 9.5.0, making it crucial for organizations utilizing these versions to update and mitigate risks associated with this vulnerability.

Affected Version(s)

MySQL Server 9.0.0 <= 9.5.0

References

https://www.oracle.com/security-alerts/cpujan2026.html
vendor-advisory

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.