Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且廠商未提供可用的修補程式。

  - 在 Tencent RapidJSON 中 1.1.0偵測到一個安全性弱點，直到 。此問題會影響元件 Regex Parser 的程式庫 include/rapidjson/stream.h 中的 GenericStringStream<UTF8<char>>：：Take 函式。操控此弱點可導致超出邊界讀取。攻擊者可從遠端發起攻擊。該漏洞已公開披露並可能被使用。該項目很早就通過問題報告被告知了這個問題，但尚未做出回應。（CVE-2026-116620）

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - 在 Tencent RapidJSON 及之前 1.1.0版本中检测到一个安全漏洞。此问题影响组件 Regex Parser 的 include/rapidjson/stream.h 库中的 GenericStringStream<UTF8<char>>：：Take 函数。攻击者可利用此漏洞导致越界读取。攻击可从远程发起。此利用已公开披露，可能会被使用。该项目很早就通过问题报告获悉了该问题，但尚未做出回应。（CVE-2026-116620）

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - セキュリティの脆弱性が、 1.1.0までの Tencent RapidJSON で検出されています。この問題は、コンポーネント Regex Parser の include/rapidjson/stream.h ライブラリの GenericStringStream<UTF8<char>>::Take 関数に影響します。この操作により、領域外読み取りが発生します。攻撃がリモートで開始される可能性があります。この悪用は広く公開されており、悪用される可能性があります。プロジェクトは、問題レポートを通じて問題について早期に通知されましたが、まだ対応していません。(CVE-2026-116620)

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:99741 advisory.

    * mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)

    * mysql: mysql: unauthorized server takeover (CVE-2026-101772)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)

    * mysql: mysql: Denial of Service via client programs (CVE-2026-101754)

    * mysql: mysql: System takeover via client programs (CVE-2026-101770)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)

    * mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)

    * mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)

    * mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)

    * mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)

    * mysql: mysql: Denial of Service (CVE-2026-101778)

    * mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)

    * mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)

    * mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)

    * mysql: mysql: Denial of Service via the C API (CVE-2026-101726)

    * mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)

    * mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)

    * mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)

    * mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)

    * mysql: mysql: Denial of service in replication component (CVE-2026-101766)

    * mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)

    * mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)

    * mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)

    * mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)

    * mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)

    * mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)

    * mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)

    * mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)

    * mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)

    * mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)

    * mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)

    * mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)

    * mysql: mysql: Denial of service via DDL component (CVE-2026-101613)

    * mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)

    * mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)

    * mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)

    * mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)

    * mysql: mysql: Denial of Service in Pluggable Auth (CVE-2026-101728)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)

    * mysql: MySQL: Denial of Service via JSON component (CVE-2026-101616)

    * mysql: mysql: complete service takeover via network access (CVE-2026-101771)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101614)

    * mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)

    * mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)

    * mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)

    * mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)

    * mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)

    * mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)

    * mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)

    * rapidjson: rapidjson: Denial of Service via out-of-bounds read in regex parser (CVE-2026-116620)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:99741 advisory.

    MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon (mysqld)     and many client programs and libraries.

    Security Fix(es):

    * mysql: mysql: system takeover via mysqldump component (CVE-2026-101797)

    * mysql: mysql: unauthorized server takeover (CVE-2026-101772)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101724)

    * mysql: mysql: Denial of Service via client programs (CVE-2026-101754)

    * mysql: mysql: System takeover via client programs (CVE-2026-101770)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101732)

    * mysql: mysql: Denial of Service via server optimizer flaw (CVE-2026-101623)

    * mysql: mysql: Denial of Service via the Replication component (CVE-2026-101727)

    * mysql: mysql: Denial of Service via the audit component (CVE-2026-101748)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101747)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101617)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)

    * mysql: mysql: Complete server takeover via replication component (CVE-2026-101796)

    * mysql: mysql: Denial of Service (CVE-2026-101778)

    * mysql: MySQL Server: Denial of service in the Server Optimizer (CVE-2026-101731)

    * mysql: mysql: Denial of Service in Group Replication plugin (CVE-2026-101776)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101760)

    * mysql: mysql: unauthorized data modification via replication component (CVE-2026-101775)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)

    * mysql: mysql: Denial of Service via the C API (CVE-2026-101726)

    * mysql: mysql: unauthorized data modification via XML component (CVE-2026-101803)

    * mysql: mysql: Denial of Service in Group Replication (CVE-2026-101751)

    * mysql: mysql: Denial of Service via Server Optimizer flaw (CVE-2026-101787)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101619)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101622)

    * mysql: mysql: Denial of Service via the Optimizer component (CVE-2026-101789)

    * mysql: mysql: Denial of service in replication component (CVE-2026-101766)

    * mysql: mysql: Denial of Service in Clone Plugin (CVE-2026-101750)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101618)

    * mysql: mysql: Denial of Service via the Server Replication component (CVE-2026-101729)

    * mysql: MySQL: Denial of Service via the Group Replication plugin (CVE-2026-101773)

    * mysql: mysql: Denial of Service via security encryption component (CVE-2026-101762)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)

    * mysql: mysql: unauthorized data access via improper privilege controls (CVE-2026-101800)

    * mysql: mysql: Partial Denial of Service via Telemetry component (CVE-2026-101779)

    * mysql: mysql: Denial of Service via Group Replication GCS (CVE-2026-101799)

    * mysql: mysql: Denial of service in InnoDB (CVE-2026-101615)

    * mysql: mysql: Denial of Service via the Server Parser (CVE-2026-101802)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101627)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101730)

    * mysql: mysql: Denial of Service via JSON component (CVE-2026-101733)

    * mysql: mysql: Denial of Service via the C API component (CVE-2026-101725)

    * mysql: mysql: Denial of Service via security encryption component (CVE-2026-101761)

    * mysql: mysql: Denial of Service in InnoDB (CVE-2026-101621)

    * mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)

    * mysql: mysql: Denial of Service in Server Components Services (CVE-2026-101721)

    * mysql: mysql: Denial of service via DDL component (CVE-2026-101613)

    * mysql: mysql: Denial of Service via multiple protocols (CVE-2026-101679)

    * mysql: mysql: Denial of Service via X Plugin (CVE-2026-101780)

    * mysql: mysql: Denial of Service via Server Components Services (CVE-2026-101788)

    * mysql: mysql: Denial of Service via XML component flaw (CVE-2026-101794)

    * mysql: mysql: Denial of Service in Pluggable Auth (CVE-2026-101728)

    * mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101801)

    * mysql: MySQL: Denial of Service via JSON component (CVE-2026-101616)

    * mysql: mysql: complete service takeover via network access (CVE-2026-101771)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101612)

    * mysql: mysql: Denial of Service in InnoDB component (CVE-2026-101614)

    * mysql: mysql: Complete service compromise by a local privileged attacker (CVE-2026-101795)

    * mysql: mysql: Server takeover via Group Replication GCS (CVE-2026-101781)

    * mysql: mysql: Denial of Service in the server optimizer (CVE-2026-101798)

    * mysql: mysql: Denial of service via InnoDB storage engine (CVE-2026-101624)

    * mysql: mysql: Denial of service via Pluggable Authentication component (CVE-2026-101774)

    * mysql: MySQL: Unauthorized data modification in JSON component (CVE-2026-101785)

    * mysql: mysql: Denial of service in query optimizer (CVE-2026-101784)

    * rapidjson: rapidjson: Denial of Service via out-of-bounds read in regex parser (CVE-2026-116620)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the     function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component     Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The     exploit has been disclosed publicly and may be used. The project was informed of the problem early through     an issue report but has not responded yet. (CVE-2026-116620)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
372378	Linux Distros 未修補弱點：CVE-2026-116620	Nessus	Misc.	2026/10/27	2026/11/6	medium
372378	Linux Distros 未修补的漏洞：CVE-2026-116620	Nessus	Misc.	2026/10/27	2026/11/6	medium
372378	Linux Distros のパッチ未適用の脆弱性: CVE-2026-116620	Nessus	Misc.	2026/10/27	2026/11/6	medium
380168	RockyLinux 9 : mysql:8.4 (RLSA-2026:99741)	Nessus	Rocky Linux Local Security Checks	2026/11/13	2026/11/13	medium
379898	RHEL 9 : mysql:8.4 (RHSA-2026:99741)	Nessus	Red Hat Local Security Checks	2026/11/12	2026/11/12	medium
372378	Linux Distros Unpatched Vulnerability : CVE-2026-116620	Nessus	Misc.	2026/10/27	2026/11/6	medium

検出

プラグインの検索

medium

medium

medium

medium

medium

medium