CVE-2025-21546

Summary

CVE-2025-21546 is a vulnerability affecting Oracle MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This easily exploitable issue allows high privileged attackers with network access to compromise the MySQL Server, granting unauthorized update, insert, or delete access to some data and unauthorized read access to a subset of data. With a CVSS 3.1 Base Score of 3.8, this vulnerability can impact both confidentiality and integrity. The attack vector includes network access and requires high privileges (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.