MEDIUM

CVE-2026-21964

mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026)

CVSS v3

4.9

MEDIUM

EPSS Score

0.0 %

exploit probability

CISA KEV

known exploited

Exploitation

none

SSVC status

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Av

Technical details

CVSS v3 Vector: 3.1
Published: 2026-01-20
Last Modified: 2026-01-29

Frequently asked questions

What is CVE-2026-21964?

Is CVE-2026-21964 actively exploited?

Active exploitation of CVE-2026-21964 has not been confirmed. The EPSS score is 0.0%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2026-21964?

CVE-2026-21964 has a CVSS v3 base score of 4.9 (MEDIUM severity), with vector string 3.1.

Is CVE-2026-21964 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IP Search CVEs SIEM & TIP integrations

No credit card required · 500 free checks/month · Free API key

Other 2026 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database