EUVD-2026-72176

A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...

CVE-2026-86227

valkey-io valkey (up to 9.0.5/9.1.1) contains an out-of-bounds read in the kvstoreGetHashtable function of src/kvstore.c, triggered by manipulation of the didx argument. Exploitation requires cluster mode plus an attacker-controlled dump.rdb at startup (via data-dir write access, replication feed...