monitor

BetterDB Monitor The monitoring layer that Valkey deserves. BetterDB persists what Valkey throws away - slowlogs, command patterns, client activity, anomaly signals - so you can debug what happened at 3am, not just what's happening now. Built for Valkey 8.x with native support for COMMANDLOG,...

CVE-2025-67733

RESP Protocol Injection PoC Proof-of-concept demonstrating RESP Protocol Injection vulnerability via Lua script error messages in Valkey/Redis. Files backend.py Flask backend simulating a web application with shared Valkey connection connection pooling. Endpoints: Method| Endpoint| Description...

CVE-2025-49844-discovery

ElastiCache Redis/Valkey Network Analysis Tools Scripts to audit AWS ElastiCache Redis and Valkey clusters for network exposure. Prerequisites AWS CLI configured with appropriate credentials jq installed: brew install jq Scripts list-elasticache-clusters.sh Lists all Redis/Valkey clusters across...

Akamai Cloud Is Scaling for What Comes Next (Updated October 2026)

Explore Akamai Cloud's Q3 2026 updates: expanded NVIDIA RTX PRO™ 6000 GPUs, Valkey Managed Database, LKE Enterprise Kubernetes scaling, and enhanced load balancing...

CLEANSTART-2026-MU78346 Redis is an open source, in-memory database that persists on disk

Security vulnerability affects the valkey package. Redis is an open source, in-memory database that persists on disk...

Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Valkey. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the parameters supplied to the PUBLISH message handler. The issue results from the la...

[SECURITY] [DSA 6586-1] valkey security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6586-1 [email protected] https://www.debian.org/security/ Lena Voytek October 27, 2026 https://www.debian.org/security/faq -...

Valkey/Redis CVE-2026-25243 Detect

Detects Redis-compatible PING on TCP Valkey module RCE chain. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Redis-compatible PING on TCP Valkey module RCE chain.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner,...

Valkey/Redis CVE-2026-25243 RESTORE RCE trigger

CVE-2026-25243: malformed RESTORE payload with DEBUG SET-SKIP-CHECKSUM-VALIDATION can corrupt memory / crash server requires --enable-debug-command on vulnerable builds. !/usr/bin/env python3 -- coding: utf-8 -- """Redis/Valkey CVE-2026-25243 RESTORE zipmap memory corruption trigger.""" from futu...

Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2026-3265)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3265 advisory. hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus...

Important: valkey

Issue Overview: hiredis commit 29ea279 post-v1.5.0 contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser. CVE-2026-88382 A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly...

CVE-2026-85522

A flaw was found in the Slot Migration component of Valkey. A remote attacker can exploit an out-of-bounds read vulnerability in the createSlotImportJob function by manipulating the jobname argument. This can lead to a denial of service, making the affected system unavailable. Mitigation Restrict...

CVE-2026-86227

A flaw was found in Valkey. An out-of-bounds read vulnerability exists in the kvstoreGetHashtable function within src/kvstore.c. This issue can be exploited by a remote attacker in cluster mode by providing a specially crafted dump.rdb file during application startup, for example, through data...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious actor with access to the Valkey clusterbus port could send an invalid packet, causing an out-of-bound read operation, which might lead to the system crashing. The Valkey clusterbus packet...

CLEANSTART-2026-ZR73377 Security fix for GHSA-jcj7-v34w-v9vv applied in: valkey 9.1.2-r0

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TY09591 Security fix for GHSA-fq2f-crmw-q97r applied in: valkey 9.1.2-r0

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-122366

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-122398

Security vulnerability affects the valkey package. This issue is resolved in later releases. See references for vulnerability details...

SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory. This update for valkey fixes the following issue: - CVE-2026-92925: failure to properly validate string-carrying extensions for...