CVE Vulnerabilities

CVE-2026-21929

Published: Jan 20, 2026 | Modified: Jan 29, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
5.3 MODERATE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 9.0.0-9.5.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H).

Affected Software

NameVendorStart VersionEnd Version
Mysql_serverOracle9.0.0 (including)9.5.0 (including)
Mariadb-10.3Ubuntuesm-apps/focal*
Mysql-5.5Ubuntuesm-infra-legacy/trusty*
Mysql-5.7Ubuntuesm-infra/bionic*
Mysql-5.7Ubuntuesm-infra/xenial*

References