Skip to content
fr Sign in
7.1 High

CVE-2026-72568 An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial…

Description

An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.

Affected products and versions

Product Affected versions Fixed in
Redis 8.8 earliest → 8.8.1 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Redis

The 50 CVEs of Redis →
CVE-2026-81934 Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS… 7.1 High CVE-2026-66373 Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code… 7.5 High CVE-2026-25243 Redis is an in-memory data structure store 7.7 High CVE-2026-23631 Redis is an in-memory data structure store 6.1 Medium
Track this CVE