31 matches found
CVE-2026-42472
Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17. The session and cache handlers use unserialize on data from Redis in the RedisHandler object...
CVE-2025-5088
CVE-2025-5088 affects Arista CloudVision Exchange (CVX) via an authenticated Redis session that could grant full root access to all CVX servers. Exploitation requires network access to the Redis service and the Redis password, and Redis traffic is plaintext (TLS support tracked separately). The i...
CVE-2025-5088
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on a CVX server and the Redis password. Please note that all Redis communication, including...
CVE-2025-5088 Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session
An authenticated Redis session could be used to obtain full root access to all servers in the CVX cluster. Note that this would require an attacker to have both network access to the Redis service on a CVX server and the Redis password. Please note that all Redis communication, including...
SUSE CVE-2026-48847
Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...
UBUNTU-CVE-2026-48847
Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...
CVE-2026-48847
Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass...
PT-2026-43110
Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions 1.6.x through 1.6.15 Roundcube Webmail versions 1.7.x through 1.7.0 Description An issue allows pre-authentication arbitrary file deletion through a session poisoning bypass when using redis or memcache. Session...
com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.5)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...
com.github.jkutner:tomcat-redis-session (8.0.18.1), org.apache.tomcat:tomcat-catalina-ha (8.0.18) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.18)
org.apache.tomcat:tomcat-catalina MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.0.18.1 - org.apache.tomcat:tomcat-catalina-ha 8.0....
com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat:tomcat-catalina (8.5.5)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...
com.github.jkutner:tomcat-redis-session (8.0.18.1), org.apache.tomcat:tomcat-catalina-ha (8.0.18) +2 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.0.18)
org.apache.tomcat:tomcat-catalina MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.0.18.1 - org.apache.tomcat:tomcat-catalina-ha 8.0....
com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (8.5.5)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...
com.github.jkutner:tomcat-redis-session (8.0.18.1), org.apache.tomcat:tomcat-catalina-ha (8.0.18) +2 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.18)
org.apache.tomcat:tomcat-catalina MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.0.18.1 - org.apache.tomcat:tomcat-catalina-ha 8.0....
com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.5.5)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...
com.github.jkutner:tomcat-redis-session (8.5.5.0), org.apache.tomcat:tomcat-catalina-ha (8.5.5) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.5.5)
org.apache.tomcat:tomcat-catalina MAVEN version 8.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.5.5.0 - org.apache.tomcat:tomcat-catalina-ha 8.5.5 ...
com.github.jkutner:tomcat-redis-session (8.0.18.1), org.apache.tomcat:tomcat-catalina-ha (8.0.18) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.18)
org.apache.tomcat:tomcat-catalina MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.0.18.1 - org.apache.tomcat:tomcat-catalina-ha 8.0....
com.github.jkutner:tomcat-redis-session (8.0.18.1), org.apache.tomcat:tomcat-catalina-ha (8.0.18) +2 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.18)
org.apache.tomcat:tomcat-catalina MAVEN version 8.0.18 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.github.jkutner:tomcat-redis-session 8.0.18.1 - org.apache.tomcat:tomcat-catalina-ha 8.0....
