EUVD-2026-84193

Incorrect Access Control in the HTTP API module in ZLMediaKit commit 9fd5152 allows remote attackers to achieve Remote Code Execution RCE via unauthenticated access to the setServerConfig API endpoint, which permits overwriting the ffmpeg.snap configuration parameter with arbitrary shell commands...

CVE-2026-88409

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a buffer overflow in the DecodeGrBMatrix function /v19/decodematrix.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96291

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description An out-of-bounds read in the node token count/relation token count component allows attackers to cause a Denial of Service DoS by providing crafted input. An out-of-bounds read occurs when th...

EUVD-2026-84191

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88407: Out-of-bounds Write

An out-of-bounds read in the nodetokencount/relationtokencount component of FalkorDB Redis module v4.20.1 to v4.20.4 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88411

Improper error handling in the GRAPH.EFFECT component /effects/effectsapply.c of FalkorDB Redis module v4.20.1 leads to a Denial of Service DoS within the application...

CVE-2026-88412

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-88406

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84192

FalkorDB Redis module v4.20.1 to v4.20.4 was discovered to contain a stack overflow in the ValidateUnionClauses function /ast/astvalidations.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-84186

An integer overflow in the BulkInsertReadProperty component /bulkinsert.c of FalkorDB Redis module v4.20.1 allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2026-96290

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description A stack overflow exists in the ValidateUnion Clauses function located in /ast/ast validations.c. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially...

CVE-2026-85219: Allocation of Resources Without Limits or Throttling

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage...

CVE-2026-88410

FalkorDB (a Redis module) contains a flaw in graph.UDF across versions v4.20.1 through v4.20.4 . The command is not registered as a write command , which leads to unexpected behavior within the application. The assigned CVSS 3.1 score is 7.1 (HIGH) , reflecting a network attack vector with low co...

PT-2026-96292

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description A stack overflow exists in the GetGroup function located in /ops/op aggregate.c. This issue allows an attacker to cause a Denial of Service DoS, which is a condition where the service becomes...

CVE-2026-88411

CVE-2026-88411 is an improper error handling vulnerability in the GRAPH.EFFECT component (/effects/effects_apply.c) of FalkorDB (a Redis module) v4.20.1 , leading to a Denial of Service within the application. The CVSS 3.1 score is 7.5 (HIGH) , with a network attack vector requiring no privileges...

CVE-2026-88410: Missing Authentication for Critical Function

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

EUVD-2026-84188

The graph.UDF in FalkorDB Redis module v4.20.1 to v4.20.4 is not registered as a write command, leading to unexpected behavior within the application...

CVE-2026-88412

CVE-2026-88412 is an integer overflow vulnerability in the _BulkInsert_ReadProperty function (file bulk_insert.c) of FalkorDB (a Redis module), version 4.20.1 . A remote attacker can supply a crafted input to trigger the overflow, resulting in a Denial of Service . The CVSS 3.1 score is 5.3 (Medi...

PT-2026-96294

Name of the Vulnerable Software and Affected Versions FalkorDB versions 4.20.1 through 4.20.4 Description The graph.UDF function in the Redis module is not registered as a write command, which causes unexpected behavior within the application. Recommendations At the moment, there is no informatio...