https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 11:32:06 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-06449 bdu:2026-06449 https://cve.radiocsirt.org/vuln/bdu:2026-06449 https://cve.radiocsirt.org/vuln/bit-keydb-2026-25588 <p><strong>Affected:</strong> Bitnami: keydb</p> <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> <p><strong>Affected:</strong> Bitnami: keydb</p> <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> https://cve.radiocsirt.org/vuln/bit-keydb-2026-25588 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0905 certfr-2026-avi-0905 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0905 https://cve.radiocsirt.org/vuln/euvd-2026-308718 EUVD-2026-308718 https://cve.radiocsirt.org/vuln/euvd-2026-308718 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25588 <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-25588 https://cve.radiocsirt.org/vuln/msrc_cve-2026-25588 msrc_CVE-2026-25588 https://cve.radiocsirt.org/vuln/msrc_cve-2026-25588 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10711-1 <p>redis-8.6.3-1.1 on GA media</p> <p>redis-8.6.3-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10711-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25588 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: redis, Ubuntu:Pro:22.04:LTS: redis, Ubuntu:24.04:LTS: redis, Ubuntu:25.10: redis, Ubuntu:26.04:LTS: redis</p> <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: redis, Ubuntu:Pro:22.04:LTS: redis, Ubuntu:24.04:LTS: redis, Ubuntu:25.10: redis, Ubuntu:26.04:LTS: redis</p> <p>RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute RESTORE on a server with the RedisTimeSeries module loaded can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This has been patched in version 1.12.14.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-25588 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1370 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um beliebigen Programmcode.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1370