Cyber Resilience

CVE-2026-21964

Oracle Mysql 8.0.0 – 8.0.44

Published
20 January 2026
Modified
29 January 2026
Patch / advisory
View advisory
CVSS Score v3.1 4.9
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0035 28th percentile
Risk Priority 38 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2026-21964 is a medium-severity an unspecified weakness vulnerability in Oracle Mysql. Its CVSS base score is 4.9 (Medium).

Operationally, ranked at the 28th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…

more

Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-50101Same product: Oracle Mysql
CVE-2024-21238Same product: Oracle Mysql
CVE-2024-21142Same product: Oracle Mysql
CVE-2025-50097Same product: Oracle Mysql
CVE-2023-22007Same product: Oracle Mysql
CVE-2023-21876Same product: Oracle Mysql
CVE-2024-21199Same product: Oracle Mysql
CVE-2024-21134Same product: Oracle Mysql
CVE-2023-21875Same product: Oracle Mysql
CVE-2024-21197Same product: Oracle Mysql

Affected Assets

oracle
mysql
8.0.0 — 8.0.44 · 8.4.0 — 8.4.7 · 9.0.0 — 9.5.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References