Most recent entries from all

fkie_cve-2026-72568

Rejected reason: Red Hat CNA-LR concluded that this CVE is not valid.

GHSA-qhgh-7273-8939

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.

msrc_CVE-2026-72568 — Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler

msrc_CVE-2026-72568

RHSA-2026:43236 — Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

redis: Redis: Remote Code Execution via specially crafted RESTORE payload

RHSA-2026:65120 — Red Hat Security Advisory: redis:7 security update

redis: Redis: Remote Code Execution via specially crafted RESTORE payload redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free redis: Redis: Out-of-bounds read via crafted cluster bus packets

RLSA-2026:65120 — Important: redis:7 security update

Affected: Rocky Linux:9: redis

Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.

Security Fix(es):

* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)

* redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)

* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Withdrawn: UBUNTU-CVE-2026-72568

Withdrawn by the publisher.

Affected: Ubuntu:Pro:14.04:LTS: redis, Ubuntu:Pro:16.04:LTS: redis, Ubuntu:Pro:18.04:LTS: redis, Ubuntu:Pro:20.04:LTS: redis, Ubuntu:Pro:22.04:LTS: redis, Ubuntu:24.04:LTS: redis, Ubuntu:26.04:LTS: redis

WID-SEC-W-2026-2745 — Redis: Schwachstelle ermöglicht Denial of Service und Offenlegung von Informationen

Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Redis ausnutzen, um einen Denial of Service Angriff durchzuführen und Informationen offenzulegen.