The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported     versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks     of this vulnerability can result in takeover of MySQL Server. (CVE-2026-60163)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are     affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as     unauthorized read access to a subset of MySQL Server accessible data. (CVE-2026-60315)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are     affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in takeover of MySQL Server. (CVE-2026-60316)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56007 advisory.

    [8.4.11-1]
    - Rebase to 8.4.11

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:56936 advisory.

    * mysql: Performance Schema unspecified vulnerability (CPU Jul 2026) (CVE-2026-61081)

    * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47064)

    * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-47012)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60331)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60190)

    * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60177)

    * mysql: Optimizer unspecified vulnerability (CPU Jul 2026) (CVE-2026-60145)

    * mysql: DDL unspecified vulnerability (CPU Jul 2026) (CVE-2026-46936)

    * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60186)

    * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60315)

    * mysql: Pluggable Auth unspecified vulnerability (CPU Jul 2026) (CVE-2026-61096)

    * mysql: Group Replication Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60163)

    * mysql: InnoDB unspecified vulnerability (CPU Jul 2026) (CVE-2026-47052)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60188)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60184)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60185)

    * mysql: JSON unspecified vulnerability (CPU Jul 2026) (CVE-2026-61109)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60191)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-61094)

    * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60178)

    * mysql: Group Replication GCS unspecified vulnerability (CPU Jul 2026) (CVE-2026-60332)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60189)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60747)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-47023)

    * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60183)

    * mysql: X Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60316)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60187)

    * mysql: Replication unspecified vulnerability (CPU Jul 2026) (CVE-2026-60585)

    * mysql: Clone Plugin unspecified vulnerability (CPU Jul 2026) (CVE-2026-60182)

    Bug Fix(es) and Enhancement(s):

    * [tracker] Rebase MySQL to 8.4.11 (JIRA:Rocky Linux-188046)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-56973 advisory.

    mecab     [0.996-3.4]
    - Bump version for package rebuild       We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
    - Resolves: #2182069

    [0.996-3.3]
    - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags       Related: rhbz#1991688

    [0.996-3.2]
    - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

    mecab-ipadic     [2.7.0.20070801-24.0.1]
    - Rename the LICENSE.Fedora to LICENSE.oracle

    [2.7.0.20070801-24]
    - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags       Related: rhbz#1991688

    [2.7.0.20070801-23]
    - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

    [2.7.0.20070801-22]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

    [2.7.0.20070801-21]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

    [2.7.0.20070801-20]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

    mysql     [8.4.11-1]
    - Rebase to 8.4.11

    perl-DBD-MySQL     [4.053-3]
    - Resolves: RHEL-132443
    - Skip the ssl tests if MySQL does not provide have_ssl

    [4.053-2]
    - Resolves: RHEL-123525
    - Fix MYSQL OPT_RECONNECT warning

    [4.053-1]
    - Resolves: RHEL-53861, RHEL-77083
    - Update check for SSL connection
    - Enable testing

    rapidjson     [1.1.0-19]
    - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags       Related: rhbz#1991688

    [1.1.0-18]
    - Remove gtest dependency and turn off tests       Resolves: #1977656

    [1.1.0-17]
    - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

    [1.1.0-16]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

    [1.1.0-15]
    - Add patch for C++20 support

    [1.1.0-14]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

    [1.1.0-13]
    - Install pkg-config and cmake files to arched location
    - Build documentation as noarch

    [1.1.0-12]
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group     Replication Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1;
    MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows     unauthenticated attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to     compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of     MySQL Server, MySQL Cluster. (CVE-2026-60163)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
329038	Oracle MySQL Server 9.x < 9.7.2 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/31	high
338026	Oracle Linux 10 : mysql8.4 (ELSA-2026-56007)	Nessus	Oracle Linux Local Security Checks	2026/8/19	2026/8/19	high
338176	RockyLinux 8 : mysql:8.4 (RLSA-2026:56936)	Nessus	Rocky Linux Local Security Checks	2026/8/19	2026/8/25	high
338446	Oracle Linux 9 : mysql:8.4 (ELSA-2026-56973)	Nessus	Oracle Linux Local Security Checks	2026/8/20	2026/8/20	high
330038	Linux Distros Unpatched Vulnerability : CVE-2026-60163	Nessus	Misc.	2026/7/26	2026/11/12	high

偵測

搜尋 Plugin

high

high

high

high

high