The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11541:01 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8006-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to     fix these issues.

    MySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:

    https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html https://www.oracle.com/security-     alerts/cpujan2026.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23008 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11584:07 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11538:01 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-942d35ff10 advisory.

    **MySQL 8.4.7**

        Release notes: https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-7.html

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53054)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53053)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-53040)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23008 advisory.

    [8.4.7-1]
    - Rebase to 8.4.7

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23008 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23111 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23134 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23137 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23109 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23109 advisory.

    [8.0.44-1]
    - Rebase to MySQL 8.0.44

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23111 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
282797	MiracleLinux 8 : mysql:8.4 (AXSA:2025-11541:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	medium
297946	Ubuntu 20.04 LTS : MySQL vulnerabilities (USN-8006-1)	Nessus	Ubuntu Local Security Checks	2026/2/4	2026/2/4	medium
271432	Photon OS 4.0: Mysql PHSA-2025-4.0-0894	Nessus	PhotonOS Local Security Checks	2025/10/25	2026/2/24	medium
278578	AlmaLinux 10 : mysql8.4 (ALSA-2025:23008)	Nessus	Alma Linux Local Security Checks	2025/12/12	2025/12/12	medium
282783	MiracleLinux 9 : mysql-8.0.44-1.el9_7.ML.1 (AXSA:2025-11584:07)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/16	medium
283437	MiracleLinux 8 : mysql:8.0 (AXSA:2025-11538:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	medium
293788	Fedora 42 : mysql8.4 (2026-942d35ff10)	Nessus	Fedora Local Security Checks	2026/1/20	2026/1/20	medium
271376	Oracle MySQL Server 8.4.x < 8.4.7 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
278133	Oracle Linux 10 : mysql8.4 (ELSA-2025-23008)	Nessus	Oracle Linux Local Security Checks	2025/12/10	2025/12/10	medium
278522	RockyLinux 10 : mysql8.4 (RLSA-2025:23008)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/12	medium
271374	Oracle MySQL Server 9.x.x < 9.5.0 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
271375	Oracle MySQL Server 8.0.x < 8.0.44 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
276941	Photon OS 5.0: Mysql PHSA-2025-5.0-0693	Nessus	PhotonOS Local Security Checks	2025/12/1	2026/2/24	medium
278387	RHEL 9 : mysql:8.4 (RHSA-2025:23111)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278389	RHEL 8 : mysql:8.0 (RHSA-2025:23134)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278516	RockyLinux 8 : mysql:8.4 (RLSA-2025:23137)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/19	medium
278518	RockyLinux 9 : mysql (RLSA-2025:23109)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/12	medium
278601	Oracle Linux 9 : mysql (ELSA-2025-23109)	Nessus	Oracle Linux Local Security Checks	2025/12/13	2026/2/24	medium
278983	AlmaLinux 9 : mysql:8.4 (ALSA-2025:23111)	Nessus	Alma Linux Local Security Checks	2025/12/17	2025/12/17	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium