The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2025 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53054)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected     are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of MySQL Server accessible data. (CVE-2025-53053)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker     with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-53040)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_23137 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_23109 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the mysql package has been released.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23111 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23134 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23137 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23109 advisory.

    [8.0.44-1]
    - Rebase to MySQL 8.0.44

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23111 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)
      * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)
      * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)
      * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_23134 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1768479757 advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2025-53040, CVE-2025-53042)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server. (CVE-2025-53044, CVE-2025-53045, CVE-2025-53062)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are     affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of     MySQL Server accessible data. (CVE-2025-53054)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23109 advisory.

    * mysql: DML unspecified vulnerability (CPU Oct 2025) (CVE-2025-53053)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53044)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53062)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53054)

    * mysql: InnoDB unspecified vulnerability (CPU Oct 2025) (CVE-2025-53045)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53040)

    * mysql: Components Services unspecified vulnerability (CPU Oct 2025) (CVE-2025-53069)

    * mysql: Optimizer unspecified vulnerability (CPU Oct 2025) (CVE-2025-53042)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
271374	Oracle MySQL Server 9.x.x < 9.5.0 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/2/24	medium
271375	Oracle MySQL Server 8.0.x < 8.0.44 (October 2025 CPU)	Nessus	Databases	2025/10/24	2026/8/6	medium
356940	Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23137)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
356964	Rocky Linux 9 [CIQ] Security Update: mysql / mysql-common / mysql-debuginfo / mysql-debugsource / etc Multiple Vulnerabilities (crlsa-2025_23109)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
276941	Photon OS 5.0: Mysql PHSA-2025-5.0-0693	Nessus	PhotonOS Local Security Checks	2025/12/1	2026/10/14	medium
333722	Photon OS 5.0: Mysql PHSA-2025-5.0-91-0693	Nessus	PhotonOS Local Security Checks	2026/8/10	2026/8/10	medium
278387	RHEL 9 : mysql:8.4 (RHSA-2025:23111)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278389	RHEL 8 : mysql:8.0 (RHSA-2025:23134)	Nessus	Red Hat Local Security Checks	2025/12/11	2025/12/11	medium
278516	RockyLinux 8 : mysql:8.4 (RLSA-2025:23137)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/19	medium
278601	Oracle Linux 9 : mysql (ELSA-2025-23109)	Nessus	Oracle Linux Local Security Checks	2025/12/13	2026/2/24	medium
278983	AlmaLinux 9 : mysql:8.4 (ALSA-2025:23111)	Nessus	Alma Linux Local Security Checks	2025/12/17	2025/12/17	medium
354488	Rocky Linux 8 [CIQ] Security Update: mecab / mecab-debuginfo / mecab-debugsource / mecab-devel / etc Multiple Vulnerabilities (crlsa-2025_23134)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	medium
359643	AlmaLinux 9.6 [TuxCare] Security Update: mysql / mysql-common / mysql-devel / mysql-errmsg / mysql-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1768479757)	Nessus	Alma Linux Local Security Checks	2026/10/1	2026/10/1	medium
278518	RockyLinux 9 : mysql (RLSA-2025:23109)	Nessus	Rocky Linux Local Security Checks	2025/12/12	2025/12/12	medium

检测

插件搜索

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium

medium