CVE catalog

CVE-2026-21941

MySQL vulnerabilities

[CVE catalog]

Severity
Medium · CVSS 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.40% · Oct 25, 2026

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. mysql: Optimizer unspecified vulnerability (CPU Jan 2026) Red Hat Product Security rates the severity of this flaw as determined by the Oracle MySQL Critical Patch Update. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntumysql-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntulibmysqlclient-devnoble8.0.45-0ubuntu0.24.04.1fixed
Ubuntulibmysqlclient21noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-clientnoble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-client-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-client-core-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-routernoble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-servernoble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-server-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-server-core-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-source-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-testsuitenoble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-testsuite-8.0noble8.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-5.514.045.5.32-0ubuntu7vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.34-0ubuntu2vulnerable
Ubuntumysql-5.514.045.5.35-0ubuntu1vulnerable
Ubuntumysql-5.514.045.5.35+dfsg-1ubuntu1vulnerable
Ubuntumysql-5.514.045.5.37-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.38-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.40-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.41-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.43-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.44-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.46-0ubuntu0.14.04.2vulnerable
Ubuntumysql-5.514.045.5.47-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.49-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.50-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.52-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.53-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.54-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.55-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.57-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.58-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.59-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.60-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.61-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.514.045.5.62-0ubuntu0.14.04.1vulnerable
Ubuntumysql-5.7pro5.7.19-0ubuntu1vulnerable
Ubuntumysql-5.7pro5.7.20-0ubuntu0.17.10.1vulnerable
Ubuntumysql-5.7pro5.7.20-1ubuntu1vulnerable
Ubuntumysql-5.7pro5.7.21-1ubuntu1vulnerable
Ubuntumysql-5.7pro5.7.22-0ubuntu18.04.1vulnerable
Ubuntumysql-5.7pro5.7.23-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.24-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.25-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.7pro5.7.26-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.27-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.28-0ubuntu0.18.04.4vulnerable
Ubuntumysql-5.7pro5.7.29-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.30-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.31-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.32-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.33-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.34-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.35-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.35-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.7pro5.7.36-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.37-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.38-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.39-0ubuntu0.18.04.2vulnerable
Ubuntumysql-5.7pro5.7.40-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.41-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.42-0ubuntu0.18.04.1vulnerable
Ubuntumysql-5.7pro5.7.43-0ubuntu0.18.04.1+esm1vulnerable
Ubuntumysql-5.7pro5.7.44-0ubuntu0.18.04.1+esm1vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu2vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4vulnerable
Ubuntupercona-server-5.616.045.6.22-rel71.0-0ubuntu4.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.21-25.8-0ubuntu3.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.34-26.19-0ubuntu0.16.04.2vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.1vulnerable
Ubuntupercona-xtradb-cluster-5.616.045.6.37-26.21-0ubuntu0.16.04.2vulnerable
Ubuntumysql-8.0pro8.0.17-0ubuntu2vulnerable
Ubuntumysql-8.0pro8.0.17-0ubuntu3vulnerable
Ubuntumysql-8.0pro8.0.18-0ubuntu3vulnerable
Ubuntumysql-8.0pro8.0.18-0ubuntu4vulnerable
Ubuntumysql-8.0pro8.0.18-0ubuntu5vulnerable
Ubuntumysql-8.0pro8.0.19-0ubuntu2vulnerable
Ubuntumysql-8.0pro8.0.19-0ubuntu3vulnerable
Ubuntumysql-8.0pro8.0.19-0ubuntu4vulnerable
Ubuntumysql-8.0pro8.0.19-0ubuntu5vulnerable
Ubuntumysql-8.0pro8.0.20-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.21-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.21-0ubuntu0.20.04.4vulnerable
Ubuntumysql-8.0pro8.0.22-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.22-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.23-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.25-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.26-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.26-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.27-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.28-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.29-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.29-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.30-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.31-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.31-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.32-0buntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.32-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.33-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.33-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.0pro8.0.33-0ubuntu0.20.04.4vulnerable
Ubuntumysql-8.0pro8.0.34-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.35-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.36-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.37-0ubuntu0.20.04.3vulnerable
Ubuntumysql-8.0pro8.0.39-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.40-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.41-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.42-0ubuntu0.20.04.1vulnerable
Ubuntumysql-8.0pro8.0.43-0ubuntu0.20.04.1+esm1vulnerable
Ubuntumysql-8.0pro8.0.45-0ubuntu0.20.04.1+esm2fixed
Ubuntumariadb-10.320.041:10.3.17-1vulnerable
Ubuntumariadb-10.320.041:10.3.18-1vulnerable
Ubuntumariadb-10.320.041:10.3.19-1vulnerable
Ubuntumariadb-10.320.041:10.3.21-2vulnerable
Ubuntumariadb-10.320.041:10.3.22-1vulnerable
Ubuntumariadb-10.320.041:10.3.22-1ubuntu1vulnerable
Ubuntumariadb-10.320.041:10.3.25-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.29-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.30-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.31-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.32-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.34-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.37-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.38-0ubuntu0.20.04.1vulnerable
Ubuntumariadb-10.320.041:10.3.39-0ubuntu0.20.04.2vulnerable
Ubuntumysql-8.022.048.0.26-0ubuntu1vulnerable
Ubuntumysql-8.022.048.0.27-0ubuntu0.21.10.1vulnerable
Ubuntumysql-8.022.048.0.28-0ubuntu3vulnerable
Ubuntumysql-8.022.048.0.28-0ubuntu4vulnerable
Ubuntumysql-8.022.048.0.29-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.29-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.29-0ubuntu0.22.04.3vulnerable
Ubuntumysql-8.022.048.0.30-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.31-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.32-0buntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.32-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.33-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.33-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.33-0ubuntu0.22.04.4vulnerable
Ubuntumysql-8.022.048.0.34-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.35-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.36-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.37-0ubuntu0.22.04.3vulnerable
Ubuntumysql-8.022.048.0.39-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.40-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.41-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.42-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.42-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.43-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.43-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.44-0ubuntu0.22.04.1vulnerable
Ubuntumysql-8.022.048.0.44-0ubuntu0.22.04.2vulnerable
Ubuntumysql-8.022.048.0.45-0ubuntu0.22.04.1fixed
Ubuntumysql-8.024.048.0.34-1ubuntu1vulnerable
Ubuntumysql-8.024.048.0.35-1ubuntu1vulnerable
Ubuntumysql-8.024.048.0.35-1ubuntu2vulnerable
Ubuntumysql-8.024.048.0.36-1vulnerable
Ubuntumysql-8.024.048.0.36-2ubuntu1vulnerable
Ubuntumysql-8.024.048.0.36-2ubuntu2vulnerable
Ubuntumysql-8.024.048.0.36-2ubuntu3vulnerable
Ubuntumysql-8.024.048.0.37-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.39-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.39-0ubuntu0.24.04.2vulnerable
Ubuntumysql-8.024.048.0.40-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.41-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.42-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.42-0ubuntu0.24.04.2vulnerable
Ubuntumysql-8.024.048.0.43-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.43-0ubuntu0.24.04.2vulnerable
Ubuntumysql-8.024.048.0.44-0ubuntu0.24.04.1vulnerable
Ubuntumysql-8.024.048.0.44-0ubuntu0.24.04.2vulnerable
Ubuntumysql-8.024.048.0.45-0ubuntu0.24.04.1fixed
Ubuntumysql-8.425.108.4.4-0ubuntu2vulnerable
Ubuntumysql-8.425.108.4.5-0ubuntu1vulnerable
Ubuntumysql-8.425.108.4.5-0ubuntu2vulnerable
Ubuntumysql-8.425.108.4.5-0ubuntu3vulnerable
Ubuntumysql-8.425.108.4.6-0ubuntu1vulnerable
Ubuntumysql-8.425.108.4.6-0ubuntu3vulnerable
Ubuntumysql-8.425.108.4.7-0ubuntu0.25.10.2vulnerable
Ubuntumysql-8.425.108.4.7-0ubuntu0.25.10.3vulnerable
Ubuntumysql-8.425.108.4.8-0ubuntu0.25.10.1fixed
Ubuntumysql-8.426.048.4.6-0ubuntu3vulnerable
Ubuntumysql-8.426.048.4.7-0ubuntu2vulnerable
Ubuntumysql-8.426.048.4.7-0ubuntu3vulnerable
Ubuntumysql-8.426.048.4.8-0ubuntu1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntumysql-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntulibmysqlclient-devdebnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntulibmysqlclient21debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-clientdebnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-client-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-client-core-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-routerdebnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-serverdebnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-server-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-server-core-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-source-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-testsuitedebnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-testsuite-8.0debnoble8.0.45-0ubuntu0.24.04.1Not reportedNot reportedNot reported
Ubuntumysql-8.0debpro8.0.45-0ubuntu0.20.04.1+esm2Not reportedUBUNTU-CVE-2026-21941Not reported
Ubuntumysql-8.0deb22.048.0.45-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2026-21941Not reported
Ubuntumysql-8.0deb24.048.0.45-0ubuntu0.24.04.1Not reportedUBUNTU-CVE-2026-21941Not reported
Ubuntumysql-8.4deb25.108.4.8-0ubuntu0.25.10.1Not reportedUBUNTU-CVE-2026-21941Not reported
Ubuntumysql-8.4deb26.048.4.8-0ubuntu1Not reportedUBUNTU-CVE-2026-21941Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References