The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-431:01 advisory.

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
      * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
      * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
      * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:6435 advisory.

    * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

    * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

    * mariadb: MariaDB Server Crash (CVE-2023-52971)

    * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

    * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-4162 advisory.

    [8.4.8-1]
    - Rebase to 8.4.8

    [8.4.7-2]
    - Skip tests that are failing on Konflux
    - Resolves: ROK-831

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:4828 advisory.

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)

    * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

    * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)

    * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6391 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)

    * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

    * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)

    * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-378:01 advisory.

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21941)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21948)
      * mysql: InnoDB unspecified vulnerability (CPU Jan 2026) (CVE-2026-21936)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)
      * mysql: DDL unspecified vulnerability (CPU Jan 2026) (CVE-2026-21937)
      * mysql: Thread Pooling unspecified vulnerability (CPU Jan 2026) (CVE-2026-21964)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1331 advisory.

    A flaw was found in MariaDB. This vulnerability allows remote attackers to execute arbitrary code on     affected installations via improper validation of a user-supplied path prior to using it in file     operations in the mariadb-dump utility, requiring user interaction. (CVE-2025-13699)

    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability     impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). (CVE-2026-21968)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-6435 advisory.

    galera     [26.4.23-1]
    - Rebase to 26.4.23

    Judy     mariadb     [3:10.11.15-1]
    - Rebase to 10.11.15
    - Resolves: RHBZ#2417697

    [3:10.11.14-1]
    - Rebase to 10.11.14
    - Resolves: RHBZ#2386961

    [3:10.11.13-1]
    - Rebase to 10.11.13

    [3:10.11.11-1]
    - Rebase to 10.11.11

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-413:01 advisory.

    * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
      * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
      * mariadb: MariaDB Server Crash (CVE-2023-52971)
      * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
      * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
      * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0267 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2023-52969:
    MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can     sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and     optimize_stage2.

    CVE-2023-52970:
    MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, 11.0 through 11.0.*, and     11.1 through 11.4.* crashes in Item_direct_view_ref::derived_field_transformer_for_where.

    CVE-2023-52971:
    MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.

    CVE-2025-21490:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.40 and prior, 8.4.3 and prior and  9.1.0 and prior. Easily exploitable vulnerability     allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).  CVSS     Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

    CVE-2025-30693:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).  Supported versions that     are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Easily exploitable vulnerability allows high     privileged attacker with network access via multiple protocols to compromise MySQL Server.  Successful     attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable     crash (complete DOS) of MySQL Server as well as  unauthorized update, insert or delete access to some of     MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts).  CVSS Vector:
    (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

    CVE-2025-30722:
    Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump).  Supported     versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and  9.0.0-9.2.0. Difficult to exploit     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Client.  Successful attacks of this vulnerability can result in  unauthorized access to critical     data or complete access to all MySQL Client accessible data as well as  unauthorized update, insert or     delete access to some of MySQL Client accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality and     Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N).

    CVE-2026-21968:
    Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).  Supported     versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and  9.0.0-9.5.0. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability     impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7994-1 advisory.

    Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to     fix these issues.

    MySQL has been updated to 8.0.45 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 has been updated     to MySQL 8.4.8.

    In addition to security fixes, the updated packages contain bug fixes, new features, and possibly     incompatible changes.

    Please see the following for more information:

    https://dev.mysql.com/doc/relnotes/mysql/8.0/en/news-8-0-45.html     https://dev.mysql.com/doc/relnotes/mysql/8.4/en/news-8-4-8.html https://www.oracle.com/security-     alerts/cpujan2026.html

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of MariaDB installed on the remote host is prior to 11.4.9. It is, therefore, affected by a vulnerability as referenced in the 11.4.9 advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability     allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2026-21968)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability     allows low privileged attacker with network access via multiple protocols to compromise MySQL Server.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of MySQL Server. (CVE-2026-21968)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:6435 advisory.

    MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL.

    Security Fix(es):

    * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)

    * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)

    * mariadb: MariaDB Server Crash (CVE-2023-52971)

    * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)

    * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)

    * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)

    * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:6435 advisory.

    * mysql: High Privilege Denial of Service Vulnerability in MySQL Server (CVE-2025-21490)
      * mariadb: MariaDB Server Crash Due to Empty Backtrace Log (CVE-2023-52969)
      * mariadb: MariaDB Server Crash (CVE-2023-52971)
      * mariadb: MariaDB Server Crash via Item_direct_view_ref (CVE-2023-52970)
      * mysql: mysqldump unspecified vulnerability (CPU Apr 2025) (CVE-2025-30722)
      * mysql: InnoDB unspecified vulnerability (CPU Apr 2025) (CVE-2025-30693)
      * mysql: Optimizer unspecified vulnerability (CPU Jan 2026) (CVE-2026-21968)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2026 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Docker Images (SQLite)). Supported     versions that are affected are 8.4.0-8.4.7. Easily exploitable vulnerability allows unauthenticated attacker with     network access via MySQL Protocol to compromise MySQL Server. Successful attacks of this vulnerability can result in     takeover of MySQL Server. (CVE-2025-6965)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are     affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows unauthenticated attacker     with network access via MySQL Protocol to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2025-9230)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are     affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows low privileged attacker     with network access via MySQL Protocol to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2026-21968)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
306368	MiracleLinux 8 : mysql:8.4 (AXSA:2026-431:01)	Nessus	Miracle Linux Local Security Checks	2026/4/14	2026/4/14	medium
304694	RockyLinux 8 : mariadb:10.11 (RLSA-2026:6435)	Nessus	Rocky Linux Local Security Checks	2026/4/2	2026/4/9	medium
301781	Oracle Linux 10 : mysql8.4 (ELSA-2026-4162)	Nessus	Oracle Linux Local Security Checks	2026/3/10	2026/3/10	medium
302837	RockyLinux 9 : mysql (RLSA-2026:4828)	Nessus	Rocky Linux Local Security Checks	2026/3/18	2026/3/18	medium
304660	RHEL 8 : mysql:8.4 (RHSA-2026:6391)	Nessus	Red Hat Local Security Checks	2026/4/2	2026/4/2	medium
304550	MiracleLinux 9 : mysql:8.4 (AXSA:2026-378:01)	Nessus	Miracle Linux Local Security Checks	2026/4/1	2026/4/7	medium
282391	Amazon Linux 2023 : mariadb1011, mariadb1011-backup, mariadb1011-client-utils (ALAS2023-2025-1331)	Nessus	Amazon Linux Local Security Checks	2026/1/8	2026/4/30	high
304798	Oracle Linux 8 : mariadb:10.11 (ELSA-2026-6435)	Nessus	Oracle Linux Local Security Checks	2026/4/3	2026/4/3	medium
305832	MiracleLinux 8 : mariadb:10.11 (AXSA:2026-413:01)	Nessus	Miracle Linux Local Security Checks	2026/4/9	2026/4/13	medium
310938	TencentOS Server 3: mariadb:10.11 (TSSA-2026:0267)	Nessus	Tencent Local Security Checks	2026/4/29	2026/4/29	medium
297661	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : MySQL vulnerabilities (USN-7994-1)	Nessus	Ubuntu Local Security Checks	2026/2/3	2026/2/3	medium
298261	MariaDB 11.4.0 < 11.4.9	Nessus	Databases	2026/2/6	2026/2/6	medium
297725	Linux Distros Unpatched Vulnerability : CVE-2026-21968	Nessus	Misc.	2026/2/3	2026/4/14	medium
304696	RHEL 8 : mariadb:10.11 (RHSA-2026:6435)	Nessus	Red Hat Local Security Checks	2026/4/2	2026/4/2	medium
305866	AlmaLinux 8 : mariadb:10.11 (ALSA-2026:6435)	Nessus	Alma Linux Local Security Checks	2026/4/10	2026/4/10	medium
296583	Oracle MySQL Server 8.4.x < 8.4.8 (January 2026 CPU)	Nessus	Databases	2026/1/26	2026/2/3	high

检测

插件搜索

medium

medium

medium

medium

medium

medium

high

medium

medium

medium

medium

medium

medium

medium

medium

high