CVE-2026-34276

CVE-2026-34276 is a denial-of-service vulnerability in Oracle MySQL Server's Group Replication Plugin that affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. The flaw allows low-privileged attackers with network access to cause the MySQL Server to hang or crash repeatedly, completely disrupting service availability. The vulnerability has a CVSS 3.1 score of 6.5 (Medium severity) and requires minimal attack complexity with network accessibility. An attacker needs only low-level privileges and can exploit the flaw without user interaction through multiple network protocols, though the impact is limited to availability with no confidentiality or integrity compromise possible. There is currently no evidence of active exploitation in the wild, with an EPSS score of 0.0004 indicating very low probability of exploitation. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities list, and community attention remains minimal, suggesting this represents a lower-priority patching requirement compared to other disclosed vulnerabilities.