CVE-2026-21941

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.44 Oracle MySQL versions 8.4.0 through 8.4.7 Oracle MySQL versions 9.0.0 through 9.5.0

Description An issue exists in the Server: Optimizer component of Oracle MySQL Server that allows a high-privileged attacker with network access to cause a denial-of-service (DOS) condition, resulting in a hang or frequent crashes of the MySQL Server. The vulnerability is easily exploitable through multiple network protocols.

Recommendations Oracle MySQL versions 8.0.0 through 8.0.44 should be updated. Oracle MySQL versions 8.4.0 through 8.4.7 should be updated. Oracle MySQL versions 9.0.0 through 9.5.0 should be updated.