CVE-2026-88410

FalkorDB (a Redis module) contains a flaw in graph.UDF across versions v4.20.1 through v4.20.4 . The command is not registered as a write command , which leads to unexpected behavior within the application. The assigned CVSS 3.1 score is 7.1 (HIGH) , reflecting a network attack vector with low co...

CVE-2026-88412

CVE-2026-88412 is an integer overflow vulnerability in the _BulkInsert_ReadProperty function (file bulk_insert.c) of FalkorDB (a Redis module), version 4.20.1 . A remote attacker can supply a crafted input to trigger the overflow, resulting in a Denial of Service . The CVSS 3.1 score is 5.3 (Medi...

CVE-2026-88408

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84190

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the GetGroup function /ops/opaggregate.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96293

Name of the Vulnerable Software and Affected Versions FalkorDB Redis module versions 4.20.1 through 4.20.4 Description A buffer overflow exists in the Decode GrB Matrix function located in /v19/decode matrix.c. This flaw allows an attacker to trigger a Denial of Service DoS by providing a special...

PT-2026-96291

An out-of-bounds read in the node token count/relation token count component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88411

CVE-2026-88411 is an improper error handling vulnerability in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (a Redis module) v4.20.1 , leading to a Denial of Service within the application. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges...

EUVD-2026-84188

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

EUVD-2026-84192

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84191

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EulerOS Virtualization 2.10.1 : cifs-utils (EulerOS-SA-2026-3829)

According to the versions of the cifs-utils packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the cifs-utils package where the cifs.upcall helper fails to securely drop its root privileges before looki...

CVE-2026-67827

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...

EUVD-2026-84193

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...

CVE-2026-88409

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96292

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description A stack overflow exists in the GetGroup function located in /ops/op aggregate.c. This issue allows an attacker to cause a Denial of Service DoS, which is a condition where the service becomes...

PT-2026-96294

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description The graph.UDF function in the Redis module is not registered as a write command, which causes unexpected behavior within the application. Recommendations At the moment, there is no informatio...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...