UpHeron
All vulnerabilities

Servers and applications

CVE-2026-21937

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or…

Severity
Medium 4.9
Published
20 Jan 2026
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
MySQLServers and applications · cpe:a:oracle:mysql_server
  • From 8.0.0 up to 8.0.44
  • From 8.4.0 up to 8.4.7
  • From 9.0.0 up to 9.5.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-21937
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-21937