{"id":"CVE-2026-81934","aliases":["ALSA-2026:64823","ALSA-2026:64824","AZL-98240","BELL-CVE-2026-81934","CLSA-2026-1789377770","CLSA-2026-1789395343","DEBIAN-CVE-2026-81934","EUVD-2026-67227","GHSA-32xw-c2hw-m34g","OESA-2026-4400","OESA-2026-4401","OESA-2026-4402","OESA-2026-4403","RHSA-2026:64823","RHSA-2026:64824","RHSA-2026:65120","RHSA-2026:67461","RHSA-2026:69520","RHSA-2026:69521","RHSA-2026:69533","RHSA-2026:69534","RHSA-2026:69542","RHSA-2026:69861","RHSA-2026:69862","RLSA-2026:64823","RLSA-2026:64824","RLSA-2026:65120","SUSE-SU-2026:3990-1","SUSE-SU-2026:3991-1","SUSE-SU-2026:4068-1","SUSE-SU-2026:4069-1","UBUNTU-CVE-2026-81934","USN-8866-1"],"status":"published","title":"Redis TLS pending-data list use-after-free","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","severity":{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00479,"percentile":0.41889,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-08-27T19:40:15Z","modified":"2026-10-29T11:32:36Z","fixes":[{"ecosystem":"Alpaquita:23","package":"redis","fixed_in":["7.2.16-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis","fixed_in":["6.2.20-1.el9_6.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-devel","fixed_in":["6.2.20-1.el9_6.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-doc","fixed_in":["6.2.20-1.el9_6.tuxcare.els4"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","fixed_in":["6.2.21-1.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","fixed_in":["6.2.21-1.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","fixed_in":["6.2.21-1.el9_2.tuxcare.els5"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"redis","fixed_in":["5:7.0.15-1~deb12u10"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"redis","fixed_in":["5:8.0.2-3+deb13u3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"redis","fixed_in":["5:8.0.6-3"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"redis","fixed_in":["7.2.4-150600.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"redis","fixed_in":["7.2.4-150600.3.30.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"redis7","fixed_in":["7.0.8-150600.8.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"redis7","fixed_in":["7.0.8-150600.8.31.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis","fixed_in":["6.2.6-150400.3.52.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis7","fixed_in":["7.0.8-150500.3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis7","fixed_in":["7.0.8-150500.3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis7","fixed_in":["7.0.8-150500.3.37.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis7","fixed_in":["7.0.8-150500.3.37.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"redis","fixed_in":["5:6.0.16-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"redis","fixed_in":["5:7.0.15-1ubuntu0.24.04.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"redis","fixed_in":["5:8.0.5-1ubuntu0.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.module_el8.10.0+4271+7f8f19af"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.module_el8.10.0+4271+7f8f19af"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:8","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.module_el8.10.0+4271+7f8f19af"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"AlmaLinux:9","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Azure Linux:3","package":"valkey","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"8.0.10-1"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"7.0.9-r0"},{"fixed":"7.2.16-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.20-1.el9_6.tuxcare.els4"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.21-1.el9_2.tuxcare.els5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1~deb12u10"}]}],"versions":["5:7.0.11-1","5:7.0.11-1+deb12u1","5:7.0.12-1","5:7.0.12-2","5:7.0.13-1","5:7.0.13-2","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1~deb12u1","5:7.0.15-1~deb12u2","5:7.0.15-1~deb12u3","5:7.0.15-1~deb12u4","5:7.0.15-1~deb12u5","5:7.0.15-1~deb12u6","5:7.0.15-1~deb12u7","5:7.0.15-1~deb12u8","5:7.0.15-1~deb12u9"]},{"source":"osv","ecosystem":"Debian:13","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.2-3+deb13u3"}]}],"versions":["5:8.0.2-3","5:8.0.2-3+deb13u1","5:8.0.2-3+deb13u2"]},{"source":"osv","ecosystem":"Debian:14","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.6-3"}]}],"versions":["5:8.0.2-3","5:8.0.4-1","5:8.0.5-1","5:8.0.6-1","5:8.0.6-2"]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.16-2.oe2203sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.16-2.oe2403sp1"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.16-2.oe2403sp3"}]}],"bundled":3},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.16-2.oe2403sp4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+24746+7b800ac5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+24746+7b800ac5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+24746+7b800ac5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+24746+7b800ac5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+24746+7b800ac5"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+24745+654dcf03"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_6"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.6.0+24910+8b24772d"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.12-2.module+el9.4.0+24911+6845972a.9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:8.8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_tus:8.8::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.module+el8.8.0+24912+36dda224.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.6::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.6.0+24913+caade4b4.8"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_aus:8.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_eus_long_life:8.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.9-5.module+el8.4.0+24914+3cb9e211.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.4::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_4.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.2::appstream","package":"redis-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.7-1.el9_2.7"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:8","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.module+el8.10.0+40313+282db117"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.24-1.el9_8"}]}],"bundled":2},{"source":"osv","ecosystem":"Rocky Linux:9","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.2.16-1.module+el9.8.0+40315+e15874a8"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.4-150600.3.30.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150600.8.31.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.2.6-150400.3.52.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP5-LTSS","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.37.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP5","package":"redis7","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.8-150500.3.37.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1.2"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1","5:6.0.16-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.5"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2","5:7.0.15-1ubuntu0.24.04.1","5:7.0.15-1ubuntu0.24.04.2","5:7.0.15-1ubuntu0.24.04.3","5:7.0.15-1ubuntu0.24.04.4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.5-1ubuntu0.1"}]}],"versions":["5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1","5:8.0.5-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:6.0.16-1ubuntu1.2"}]}],"versions":["5:6.0.15-1","5:6.0.16-1","5:6.0.16-1build1","5:6.0.16-1ubuntu1","5:6.0.16-1ubuntu1.1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:7.0.15-1ubuntu0.24.04.5"}]}],"versions":["5:7.0.12-1","5:7.0.14-1","5:7.0.14-2","5:7.0.15-1","5:7.0.15-1build1","5:7.0.15-1build2","5:7.0.15-1ubuntu0.24.04.1","5:7.0.15-1ubuntu0.24.04.2","5:7.0.15-1ubuntu0.24.04.3","5:7.0.15-1ubuntu0.24.04.4"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5:8.0.5-1ubuntu0.1"}]}],"versions":["5:8.0.2-3build1","5:8.0.2-3ubuntu0.25.10.1","5:8.0.5-1"],"bundled":2}],"products":[{"vendor":"redis","product":"redis"},{"vendor":"redis","product":"redis software (enterprise)"}],"references":[{"url":"https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834","tags":["patch","fix","article","report"]},{"url":"https://github.com/v12-security/pocs/tree/main/redis/server_ssl","tags":["exploit","evidence","article","report"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES","tags":["release-notes","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES","tags":["release-notes","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES","tags":["release-notes","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES","tags":["release-notes","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES","tags":["release-notes","advisory","article","report"]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json","tags":["third-party-advisory","advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81934","tags":["vdb-entry","advisory","report"]},{"url":"https://github.com/redis/redis/releases/tag/6.2.24","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/7.2.16","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/7.4.11","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/8.4.6","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/8.2.9","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/8.6.6","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/8.8.2","tags":["release-notes","advisory"]},{"url":"https://github.com/redis/redis/releases/tag/8.10.1","tags":["release-notes","advisory"]},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/","tags":["release-notes","advisory"]},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/","tags":["release-notes","advisory"]},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/","tags":["release-notes","advisory"]},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/","tags":["release-notes","advisory"]},{"url":"https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES","tags":["release-notes","advisory"]},{"url":"https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES","tags":["release-notes","advisory"]},{"url":"https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES","tags":["release-notes","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81934","tags":["web","advisory"]},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46"},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96"},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303"},{"url":"https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179"},{"url":"https://github.com/advisories/GHSA-32xw-c2hw-m34g"},{"url":"https://access.redhat.com/errata/RHSA-2026:64823","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-66373","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81934","tags":["report"]},{"url":"https://bugzilla.redhat.com/2506985","tags":["report"]},{"url":"https://bugzilla.redhat.com/2525226","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2026-64823.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:64824","tags":["advisory"]},{"url":"https://errata.almalinux.org/9/ALSA-2026-64824.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-81934","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1789377770.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1789395343.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/81xxx/CVE-2026-81934.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-81934","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4400","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62356","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92925","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4401","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4402","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4403","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2506985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2525226","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64823.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-66373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-66373","tags":["advisory"]},{"url":"https://github.com/berabuddies/redis-poc","tags":["article"]},{"url":"https://github.com/redis/redis/compare/8.6.4...8.8.0","tags":["article"]},{"url":"https://github.com/redis/redis/pull/15081","tags":["article"]},{"url":"https://news.ycombinator.com/item?id=49024938","tags":["article"]},{"url":"https://x.com/Fried_rice/status/2080059356322918777","tags":["article"]},{"url":"https://issues.redhat.com/browse/RHEL-180910","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_64824.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:65120","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2513105","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65120.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-72568","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-72568","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535971","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92925","tags":["advisory"]},{"url":"https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523","tags":["article"]},{"url":"https://github.com/redis/redis/pull/15263","tags":["article"]},{"url":"https://github.com/redis/redis/releases/tag/8.10.0","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2026:67461","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_67461.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69520","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69520.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69521","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69521.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69533","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69533.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69534","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69534.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69542","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69542.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69861","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69861.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:69862","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_69862.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:64823","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:64824","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2026:65120","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263990-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1277794","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-81934","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263991-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264068-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264069-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-81934","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-8866-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-92925","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-81934","title":"Redis TLS pending-data list use-after-free","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T19:40:15.141Z","modified":"2026-08-31T19:17:53.121Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T13:36:29.327819Z"}],"euvd":[{"id":"EUVD-2026-67227","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T19:40:15Z","modified":"2026-08-31T19:17:53Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:01:19.818565Z"}],"ghsa":[{"id":"GHSA-32xw-c2hw-m34g","title":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which...","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.","status":"published","published":"2026-08-27T21:31:54Z","modified":"2026-08-31T21:31:55Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:11:11.962153Z"}],"nvd":[{"id":"CVE-2026-81934","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T20:18:57.35Z","modified":"2026-08-31T20:17:12.093Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:12:42.035353Z"}],"osv":[{"id":"BELL-CVE-2026-81934","status":"published","published":"2026-09-03T06:05:29.433003Z","modified":"2026-09-19T07:15:04.8171518Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:26.341144Z"},{"id":"CVE-2026-81934","title":"Redis TLS pending-data list use-after-free","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T19:40:15.141Z","modified":"2026-10-28T11:00:40.864931722Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:45:18.131258Z"},{"id":"DEBIAN-CVE-2026-81934","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T20:18:57.35Z","modified":"2026-10-02T10:00:07.29959746Z","cvss":[{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"updated_at":"2026-11-02T15:46:04.577397Z"},{"id":"OESA-2026-4400","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.(CVE-2026-62356)\n\nRedis contains a use-after-free vulnerability in the \u0026apos;tlsProcessPendingData()\u0026apos; function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.(CVE-2026-81934)\n\nA vulnerability, which was classified as critical, was found in Redis up to 8.8.1/8.9.x.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 8.10.0 eliminates this vulnerability.(CVE-2026-92925)","status":"published","published":"2026-10-16T12:00:11Z","modified":"2026-10-16T12:15:20.424578505Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4401","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.(CVE-2026-62356)\n\nRedis contains a use-after-free vulnerability in the \u0026apos;tlsProcessPendingData()\u0026apos; function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.(CVE-2026-81934)\n\nA vulnerability, which was classified as critical, was found in Redis up to 8.8.1/8.9.x.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 8.10.0 eliminates this vulnerability.(CVE-2026-92925)","status":"published","published":"2026-10-16T12:00:12Z","modified":"2026-10-16T12:15:21.275872115Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4402","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.(CVE-2026-62356)\n\nRedis contains a use-after-free vulnerability in the \u0026apos;tlsProcessPendingData()\u0026apos; function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.(CVE-2026-81934)\n\nA vulnerability, which was classified as critical, was found in Redis up to 8.8.1/8.9.x.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 8.10.0 eliminates this vulnerability.(CVE-2026-92925)","status":"published","published":"2026-10-16T12:00:13Z","modified":"2026-10-16T12:15:20.429842547Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"OESA-2026-4403","title":"redis security update","description":"Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets.\r\n\r\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.(CVE-2026-62356)\n\nRedis contains a use-after-free vulnerability in the \u0026apos;tlsProcessPendingData()\u0026apos; function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.(CVE-2026-81934)\n\nA vulnerability, which was classified as critical, was found in Redis up to 8.8.1/8.9.x.CWE is classifying the issue as CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.This is going to have an impact on confidentiality, integrity, and availability.Upgrading to version 8.10.0 eliminates this vulnerability.(CVE-2026-92925)","status":"published","published":"2026-10-16T12:00:13Z","modified":"2026-10-16T12:15:20.426826983Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.981622Z"},{"id":"RHSA-2026:64823","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2026-09-08T10:19:18Z","modified":"2026-09-22T10:17:41Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:64824","title":"Red Hat Security Advisory: redis security, bug fix, and enhancement update","status":"published","published":"2026-09-09T10:20:15Z","modified":"2026-09-22T10:17:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:65120","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-09T10:20:19Z","modified":"2026-10-10T10:17:13Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:21.91255Z"},{"id":"RHSA-2026:67461","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2026-09-15T10:17:14Z","modified":"2026-09-22T10:18:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69520","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-22T10:20:01Z","modified":"2026-10-10T10:19:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69521","title":"Red Hat Security Advisory: redis:7 security update","status":"published","published":"2026-09-22T10:20:02Z","modified":"2026-10-10T10:19:06Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69533","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2026-09-22T10:20:03Z","modified":"2026-09-22T10:31:00.621887218Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69534","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2026-09-22T10:20:03Z","modified":"2026-09-22T10:32:21.191728315Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69542","title":"Red Hat Security Advisory: redis:6 security update","status":"published","published":"2026-09-22T10:20:05Z","modified":"2026-09-22T10:32:24.812010935Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69861","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2026-09-22T10:20:13Z","modified":"2026-09-22T10:30:48.635950776Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RHSA-2026:69862","title":"Red Hat Security Advisory: redis security update","status":"published","published":"2026-09-22T10:20:14Z","modified":"2026-09-22T10:32:24.819436264Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:22.406388Z"},{"id":"RLSA-2026:64823","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n\n* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-09T06:01:32.269149Z","modified":"2026-09-09T06:30:05.100000079Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:64824","title":"Important: redis security, bug fix, and enhancement update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n\n* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\nBug Fix(es) and Enhancement(s):\n\n* segfault because of Unsupported system page size (jemalloc) (JIRA:Rocky Linux-180910)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-09T12:05:17.368443Z","modified":"2026-09-09T12:30:02.588578331Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"RLSA-2026:65120","title":"Important: redis:7 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.\n\nSecurity Fix(es):\n\n* redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n\n* redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)\n\n* redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2026-09-09T12:05:17.368443Z","modified":"2026-09-09T12:30:03.351185905Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:26.449929Z"},{"id":"UBUNTU-CVE-2026-81934","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T20:18:00Z","modified":"2026-10-08T12:55:23.403901789Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":7.5,"vector":"CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T16:57:22.213888Z"},{"id":"ALSA-2026:64823","title":"Important: redis:6 security update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n  * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-08T00:00:00Z","modified":"2026-10-29T11:02:29.018588298Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"ALSA-2026:64824","title":"Important: redis security, bug fix, and enhancement update","description":"Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the data set to disk every once in a while, or by appending each command to a log.  \n\nSecurity Fix(es):  \n\n  * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)\n  * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * segfault because of Unsupported system page size (jemalloc) (JIRA:AlmaLinux-180910)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2026-09-08T00:00:00Z","modified":"2026-10-29T11:32:36.95138806Z","updated_at":"2026-11-02T15:27:55.200553Z"},{"id":"AZL-98240","title":"CVE-2026-81934 affecting package valkey 8.0.10-1","description":"Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.","status":"published","published":"2026-08-27T20:18:57Z","modified":"2026-09-08T05:27:28Z","updated_at":"2026-11-02T15:28:12.313414Z"},{"id":"CLSA-2026-1789377770","title":"redis: Fix of CVE-2026-81934","description":"- CVE-2026-81934: fix use-after-free in tlsProcessPendingData() by detaching\n  each pending TLS connection from the head of pending_list before invoking\n  its event handler, instead of iterating with a listIter whose pre-cached\n  next pointer could dangle when the handler closed another connection","status":"published","published":"2026-09-14T09:22:59Z","modified":"2026-10-26T09:31:31.670585933Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"CLSA-2026-1789395343","title":"redis: Fix of CVE-2026-81934","description":"- CVE-2026-81934: fix use-after-free in the TLS pending-data list by detaching\n  each connection from the list head before running its read handler","status":"published","published":"2026-09-14T14:15:55Z","modified":"2026-10-26T09:30:45.958061911Z","updated_at":"2026-11-02T15:43:47.938828Z"},{"id":"SUSE-SU-2026:3990-1","title":"Security update for redis","description":"This update for redis fixes the following issue:\n\n- CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).\n","status":"published","published":"2026-09-07T07:20:38Z","modified":"2026-09-13T18:23:13.455416769Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:3991-1","title":"Security update for redis7","description":"This update for redis7 fixes the following issue:\n\n- CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).\n","status":"published","published":"2026-09-07T07:21:20Z","modified":"2026-09-13T18:23:13.447102371Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4068-1","title":"Security update for redis","description":"This update for redis fixes the following issue:\n\n- CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).\n","status":"published","published":"2026-09-08T07:05:13Z","modified":"2026-09-13T18:23:19.765286766Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"SUSE-SU-2026:4069-1","title":"Security update for redis7","description":"This update for redis7 fixes the following issue:\n\n- CVE-2026-81934: TLS pending-data handling can cause use-after-free (bsc#1277794).\n","status":"published","published":"2026-09-08T07:05:44Z","modified":"2026-09-13T18:23:19.861935402Z","updated_at":"2026-11-02T15:54:05.392906Z"},{"id":"USN-8866-1","title":"redis vulnerabilities","description":"It was discovered that Redis did not properly manage memory when handling\nthe TLS pending-data list. A remote attacker could possibly use this issue\nto execute arbitrary code. (CVE-2026-81934)\n\nIt was discovered that Redis incorrectly handled certain inputs when\nprocessing cluster bus packets. A remote attacker could possibly use this\nissue to expose sensitive information or cause a denial of service. This\nissue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-92925)","status":"published","published":"2026-10-06T03:02:05Z","modified":"2026-10-08T12:58:04.578061557Z","updated_at":"2026-11-02T16:58:26.907654Z"}]}}