--- title: "CVE-2026-34271\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2026-34271?format=md keywords: index, follow --- # CVE-2026-34271 Publication date 21 April 2026 Last updated 6 June 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) ## Cvss 3 Severity Score **6.5 · Medium** [Score breakdown](https://ubuntu.com/security/CVE-2026-34271?format=md#impact-score) Toggle side navigation ## Description Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). [Read the notes from the security team](https://ubuntu.com/security/CVE-2026-34271?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | percona-xtradb-cluster-5.6 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 16.04 LTS xenial | Needs evaluation | | percona-server-5.6 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 16.04 LTS xenial | Needs evaluation | | mariadb | 26.04 LTS resolute | Not affected | | 25.10 questing | Not affected | | 24.04 LTS noble | Not affected | | 22.04 LTS jammy | Not in release | | mariadb-10.0 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 16.04 LTS xenial | Not affected | | mariadb-10.1 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Not affected | | mariadb-10.3 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored no more upstream support | | mariadb-10.6 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not affected | | mysql-5.5 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 14.04 LTS trusty | Ignored see notes | | mysql-5.7 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored see notes | | 16.04 LTS xenial | Ignored end of ESM support, was ignored [see notes] | | mysql-8.0 | 26.04 LTS resolute | Not in release | | 25.10 questing | Not in release | | 24.04 LTS noble | Fixed 8.0.46-0ubuntu0.24.04.2 | | 22.04 LTS jammy | Fixed 8.0.46-0ubuntu0.22.04.2 | | 20.04 LTS focal | Fixed 8.0.46-0ubuntu0.20.04.1+esm2 Ubuntu Pro | | mysql-8.4 | 26.04 LTS resolute | Fixed 8.4.9-0ubuntu0.26.04.1 | | 25.10 questing | Fixed 8.4.9-0ubuntu0.25.10.1 | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ### Get expanded security coverage with Ubuntu Pro Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use. [Get Ubuntu Pro](https://ubuntu.com/pro) [30-day free trial](https://ubuntu.com/pro/free-trial) ## Notes --- ### [iconstantin](https://launchpad.net/~iconstantin) since mysql versions 5.7 and earlier are no longer supported upstream, we are unable to update them to address security issues, marking as ignored. mariadb 5.5, 10.0, 10.1, and 10.3 are end of life and no longer supported upstream - marking as ignored. ## Severity score breakdown CVSS version: CVSS v3.0 **Base score** 6.5 · Medium * Base metrics | Parameter | Value | | --- | --- | | Attack vector | Network | | Attack complexity | Low | | Privileges required | Low | | User interaction | None | | Scope | Unchanged | | Confidentiality impact | None | | Integrity impact | None | | Availability impact | High | * Scores | Parameter | Value | | --- | --- | | Base score | 6.5 · Medium | | Exploitability score | - | | Impact score | - | **Vector:** CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34271) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-34271) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2026-34271) * [Debian](https://security-tracker.debian.org/tracker/CVE-2026-34271) ### Related Ubuntu Security Notices (USN) + [USN-8363-1](https://usn.ubuntu.com/USN-8363-1) + MySQL vulnerabilities + 2 June 2026 + [USN-8363-2](https://usn.ubuntu.com/USN-8363-2) + MySQL vulnerabilities + 3 June 2026 ### Other references *