RockyLinux 9 : redis (RLSA-2026:64824)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64824 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data lis...

TencentOS Server 4: redis (TSSA-2026:0981)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0981 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-81381

creationtimestamp| type| source ---|---|--- 2026-09-08 20:18:46+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0351 2026-09-08 22:02:04+00:00| seen| https://www.thezdi.com/blog/2026/9/8/the-september-2026-security-update-review 2026-09-09 04:00:39+00:00| seen|...

CVE-2026-76201

creationtimestamp| type| source ---|---|--- 2026-09-08 20:14:29+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3muztkvy3f52f 2026-09-09 11:30:14+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv3gq5r6x62j 2026-09-09 15:22:26+00:00| seen|...

CVE-2026-86730

creationtimestamp| type| source ---|---|--- 2026-09-08 17:01:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muzis4vkoq2m 2026-09-08 17:40:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/erj2p47g5lwzi...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

CVE-2026-48888

creationtimestamp| type| source ---|---|--- 2026-09-08 09:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muynxhw4tl22 2026-09-08 10:46:46+00:00| seen| https://bsky.app/profile/suriq.io/post/3muyttr6x4w2t 2026-09-08 11:13:17+00:00| seen|...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

SUSE-SU-2026:4069-1 Security update for redis7

This update for redis7 fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...

Security update for redis7

This update for redis7 fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

Security update for redis

This update for redis fixes the following issue: CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the...

SUSE-SU-2026:4068-1 Security update for redis

This update for redis fixes the following issue: - CVE-2026-81934: TLS pending-data handling can cause use-after-free bsc1277794...

CVE-2026-86519

creationtimestamp| type| source ---|---|--- 2026-09-08 05:49:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2cwa2p6farulq...

CVE-2026-86516

creationtimestamp| type| source ---|---|--- 2026-09-08 05:47:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/5xj6blo4uwp3f...

valkey: Valkey: Remote code execution via TLS pending-data processing use-after-free

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

AlmaLinux 8 : redis:6 (ALSA-2026:64823)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:64823 advisory. redis: Redis: Remote Code Execution via specially crafted RESTORE payload CVE-2026-66373 redis: Redis: Arbitrary code execution via TLS pending-data list...

RHEL 8 : redis:6 (RHSA-2026:64823)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64823 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...

ALSA-2026:64796 Important: valkey security, bug fix, and enhancement update

Valkey is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing s...

RHEL 9 : redis (RHSA-2026:64824)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:64824 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, set...