Количество 32
Количество 32
ROS-20260803-80-0003
Уязвимость redis
ROS-20260803-73-0003
Уязвимость redis
ROS-20260708-80-0043
Уязвимость valkey
ROS-20260708-73-0034
Уязвимость valkey
BDU:2026-06448
Уязвимость команды RESTORE системы управления базами данных (СУБД) Redis, позволяющая нарушителю выполнить произвольный код
ALT-PU-2026-9032
ALT-PU-2026-9032: package `redis` update to version 8.6.4-alt1
ALT-PU-2026-8819
ALT-PU-2026-8819: package `redis` update to version 8.6.4-alt1
ALT-PU-2026-8793
ALT-PU-2026-8793: package `valkey` update to version 8.1.8-alt1
CVE-2026-25243
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
CVE-2026-25243
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
CVE-2026-25243
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
CVE-2026-25243
redis-server RESTORE invalid memory access may allow remote code execution
CVE-2026-25243
Redis is an in-memory data structure store. In versions of redis-serve ...
SUSE-SU-2026:2098-1
Security update for redis
RLSA-2026:26008
Important: redis:6 security update
RLSA-2026:23229
Important: redis security update
GHSA-c8h9-259x-jff4
Invalid Memory Access in Redis RESTORE Command May Lead to Remote Code Execution
ELSA-2026-26008
ELSA-2026-26008: redis:6 security update (IMPORTANT)
ELSA-2026-23229
ELSA-2026-23229: redis security update (IMPORTANT)
SUSE-SU-2026:2100-1
Security update for redis7
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | ROS-20260803-80-0003 Уязвимость redis | CVSS3: 8.8 | 4% Низкий | 3 месяца назад |
| ROS-20260803-73-0003 Уязвимость redis | CVSS3: 8.8 | 4% Низкий | 3 месяца назад |
| ROS-20260708-80-0043 Уязвимость valkey | CVSS3: 8.8 | 4% Низкий | 4 месяца назад |
| ROS-20260708-73-0034 Уязвимость valkey | CVSS3: 8.8 | 4% Низкий | 4 месяца назад |
 | BDU:2026-06448 Уязвимость команды RESTORE системы управления базами данных (СУБД) Redis, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 4% Низкий | 6 месяцев назад |
 | ALT-PU-2026-9032 ALT-PU-2026-9032: package `redis` update to version 8.6.4-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-8819 ALT-PU-2026-8819: package `redis` update to version 8.6.4-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
| ALT-PU-2026-8793 ALT-PU-2026-8793: package `valkey` update to version 8.1.8-alt1 | CVSS3: 8.8 | 5 месяцев назад | |
 | CVE-2026-25243 Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3. | CVSS3: 8.8 | 4% Низкий | 6 месяцев назад |
 | CVE-2026-25243 Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3. | CVSS3: 8.8 | 4% Низкий | 6 месяцев назад |
| CVE-2026-25243 Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3. | CVSS3: 8.8 | 4% Низкий | 6 месяцев назад |
 | CVE-2026-25243 redis-server RESTORE invalid memory access may allow remote code execution | 4% Низкий | 5 месяцев назад | |
| CVE-2026-25243 Redis is an in-memory data structure store. In versions of redis-serve ... | CVSS3: 8.8 | 4% Низкий | 6 месяцев назад |
 | SUSE-SU-2026:2098-1 Security update for redis | 4% Низкий | 5 месяцев назад | |
 | RLSA-2026:26008 Important: redis:6 security update | 4% Низкий | 5 месяцев назад | |
| RLSA-2026:23229 Important: redis security update | 4% Низкий | 5 месяцев назад | |
| GHSA-c8h9-259x-jff4 Invalid Memory Access in Redis RESTORE Command May Lead to Remote Code Execution | 4% Низкий | 6 месяцев назад | |
| ELSA-2026-26008 ELSA-2026-26008: redis:6 security update (IMPORTANT) | 4% Низкий | 5 месяцев назад | |
| ELSA-2026-23229 ELSA-2026-23229: redis security update (IMPORTANT) | 4% Низкий | 4 месяца назад | |
| SUSE-SU-2026:2100-1 Security update for redis7 | 5 месяцев назад |
Уязвимостей на страницу