Vulnerability
CVE-2016-5609
CVE-2016-5609 is a medium-severity vulnerability (CVSS v3.1 6.5). As of 2026-10-26, 5 467 hosts in our data show software it affects on an open service in at least 15 countries.
Unspecified vulnerability in Oracle MySQL 5.6.31 and earlier and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.
- Published
- 2016-10-25
- Last modified
- 2026-06-17
- CVSS score
- 6.5 CVSS v3.1
- CVSS vector (v3.1)
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Exploit likelihood (EPSS)
- 3.3% in the next 30 days (top 12% of CVEs)
Exposure in our data
5 467 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 19 hosts with this CVE only from an older observation.
Not counted: 40 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
131 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-26 04:20 UTC
By country
| China CN | 3 476 |
| United States US | 677 |
| South Korea KR | 348 |
| Hong Kong HK | 152 |
| India IN | 117 |
| Serbia RS | 80 |
| Singapore SG | 68 |
| Japan JP | 65 |
| Türkiye TR | 64 |
| Brazil BR | 53 |
| Taiwan TW | 51 |
| Russia RU | 35 |
| Indonesia ID | 32 |
| Philippines PH | 30 |
| Canada CA | 19 |
Affected software seen
| mysql 5.6.16 | 1 613 |
| mysql 5.6.25 | 522 |
| mysql 5.7.12 | 465 |
| mysql 5.6.21 | 311 |
| mysql 5.6.29 | 202 |
| mysql 5.7.11 | 190 |
| mysql 5.6.26 | 181 |
| mysql 5.6.17 | 169 |
| mysql 5.6.24 | 160 |
| mysql 5.6.28 | 160 |
| mysql 5.7.10 | 129 |
| mysql 5.7.9 | 121 |