Lucene search
+L

7 matches found

SUSE Linux
SUSE Linux
•added 2026/08/18 7:52 a.m.•12 views

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer bsc1273162. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like Ya...

9.2CVSS8AI score0.00872EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/18 7:52 a.m.•7 views

SUSE-SU-2026:3636-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-66373: remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer bsc1273162...

7.5CVSS8.1AI score0.00872EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/25 1:16 a.m.•11 views

DEBIAN-CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...

7.5CVSS6.5AI score0.00872EPSS
SaveExploits0References1
OSV
OSV
•added 2026/07/25 1:16 a.m.•11 views

UBUNTU-CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...

7.5CVSS7.7AI score0.00872EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/07/25 12:08 a.m.•59 views

CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...

7.5CVSS0.00872EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/07/25 12:08 a.m.•13 views

CVE-2026-66373

Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK pending entry is referenced by more than one consumer, because deleting both consumers via XGROUP DELCONSUMER leads to a double free...

7.5CVSS7.7AI score0.00872EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/07/24 12:00 a.m.•43 views

PT-2026-64451

Name of the Vulnerable Software and Affected Versions Redis versions prior to 8.8.0 Description A double free error occurs when an authenticated attacker executes the RESTORE command. This happens when a RESTORE payload references the same NACK pending entry across multiple consumers, and both...

7.5CVSS7.4AI score0.00872EPSS
SaveExploits0References42
Rows per page
Query Builder