7.1
High
CVE-2026-72568 An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial…
Description
An out-of-bounds read vulnerability in Redis through 8.8.1 allows an adjacent unauthenticated attacker to cause denial of service or information disclosure by sending a specially crafted PING message to the Redis Cluster Bus port.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Redis 8.8 | earliest → 8.8.1 | No fix stated |
Other CVEs of Redis
The 50 CVEs of Redis →
CVE-2026-81934
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS…
7.1
High
CVE-2026-66373
Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code…
7.5
High
CVE-2026-25243
Redis is an in-memory data structure store
7.7
High
CVE-2026-23631
Redis is an in-memory data structure store
6.1
Medium