PT-2026-96292

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/op aggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96152

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 6.7.260717 Description An authentication bypass exists in the web-based network traffic monitoring application where the endpoint "/lua/rest/v2/edit/system/edit blacklist.lua" fails to verify administrator privileges...

CVE-2026-88407: Out-of-bounds Write

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

RHEL 9 : redis:7 (RHSA-2026:69521)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69521 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:4068-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4068-1 advisory. This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Tenable ha...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88409

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88410

FalkorDB (a Redis module) contains a flaw in graph.UDF across versions v4.20.1 through v4.20.4 . The command is not registered as a write command , which leads to unexpected behavior within the application. The assigned CVSS 3.1 score is 7.1 (HIGH) , reflecting a network attack vector with low co...

CVE-2026-88407

CVE-2026-88407 is an out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (a Redis module), affecting versions v4.20.1 through v4.20.4 . An unauthenticated remote attacker can trigger a Denial of Service by sending a crafted input over the network with low complex...

CVE-2026-88406

FalkorDB (a Redis graph database module), versions v4.20.1 through v4.20.4 , is affected by a stack overflow in the _ValidateUnion_Clauses function located in /ast/ast_validations.c. The flaw allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) by sending a crafted input...

CVE-2026-88410: Missing Authentication for Critical Function

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

RHEL 8 : redis:6 (RHSA-2026:69542)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69542 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

RHEL 8 : redis:6 (RHSA-2026:69533)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69533 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

RHEL 8 : apr-util (RHSA-2026:69113)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69113 advisory. The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains...

PT-2026-96293

Name of the Vulnerable Software and Affected Versions FalkorDB Redis module versions 4.20.1 through 4.20.4 Description A buffer overflow exists in the Decode GrB Matrix function located in /v19/decode matrix.c. This flaw allows an attacker to trigger a Denial of Service DoS by providing a special...

PT-2026-96238

Name of the Vulnerable Software and Affected Versions OpenCanary version 0.9.9 Description The Redis module contains a flaw that allows an unauthenticated remote attacker to cause unconstrained memory usage, leading to a Denial-of-Service DoS condition. Denial-of-Service is a state where a system...

PT-2026-96290

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnion Clauses function /ast/ast validations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88408: Stack-based Buffer Overflow

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...