CVE-2026-88407

CVE-2026-88407 is an out-of-bounds read in the node_token_count/relation_token_count component of FalkorDB (a Redis module), affecting versions v4.20.1 through v4.20.4 . An unauthenticated remote attacker can trigger a Denial of Service by sending a crafted input over the network with low complex...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:4068-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4068-1 advisory. This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Tenable ha...

RHEL 8 : redis:6 (RHSA-2026:69533)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69533 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

PT-2026-104831

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest/v2/edit/system/edit blacklist.lua in scripts/lua/rest/v2/edit/system/edit blacklist.lua lacks an administrator check and calls lists utils.editList for any authenticated user. The list name, list...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88412

CVE-2026-88412 is an integer overflow vulnerability in the _BulkInsert_ReadProperty function (file bulk_insert.c) of FalkorDB (a Redis module), version 4.20.1 . A remote attacker can supply a crafted input to trigger the overflow, resulting in a Denial of Service . The CVSS 3.1 score is 5.3 (Medi...

CVE-2026-88412: Integer Overflow or Wraparound

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

SUSE SLES15 Security Update : redis (SUSE-SU-2026:3990-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3990-1 advisory. This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Tenable ha...

PT-2026-96293

Name of the Vulnerable Software and Affected Versions FalkorDB Redis module versions 4.20.1 through 4.20.4 Description A buffer overflow exists in the Decode GrB Matrix function located in /v19/decode matrix.c. This flaw allows an attacker to trigger a Denial of Service DoS by providing a special...

PT-2026-96238

Name of the Vulnerable Software and Affected Versions OpenCanary version 0.9.9 Description The Redis module contains a flaw that allows an unauthenticated remote attacker to cause unconstrained memory usage, leading to a Denial-of-Service DoS condition. Denial-of-Service is a state where a system...

PT-2026-96100

A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled...

PT-2026-96152

Name of the Vulnerable Software and Affected Versions ntopng versions prior to 6.7.260717 Description An authentication bypass exists in the web-based network traffic monitoring application where the endpoint "/lua/rest/v2/edit/system/edit blacklist.lua" fails to verify administrator privileges...

PT-2026-96291

An out-of-bounds read in the node token count/relation token count component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96290

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnion Clauses function /ast/ast validations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88410: Missing Authentication for Critical Function

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

CVE-2026-88409: Buffer Copy without Checking Size of Input

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407: Out-of-bounds Write

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-85219: Allocation of Resources Without Limits or Throttling

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-83621: Missing Authorization

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260717, POST /lua/rest/v2/edit/system/editblacklist.lua in scripts/lua/rest/v2/edit/system/editblacklist.lua lacks an administrator check and calls listsutils.editList for any authenticated user. The listname, listenabled,...