CVE Feed

    Dashboard / CVE / CVE-2026-25243

    CVE-2026-25243

    Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.

    Published:May 5, 2026
    Last Modified:May 6, 2026
    EPS:May 5, 2026
    EPSS Score:0.00104
    CVSS Score:8.8

    Affected Products

    Vendor
    Redis
    Product
    Redis

    Exploits

    https://github.com/captain-woof/CVE-2026-25243https://github.com/dinosn/CVE-2026-25243https://github.com/dinosn/CVE-2026-25243-debugfree

    Common Weakness Enumeration

    CWE-122 Heap-based Buffer Overflow

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-92 Forced Integer Overflow

    Related CVEs

    CVE-2026-81934 (CVSS 7.5) — Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS…
    CVE-2026-72568 (CVSS 7.1) — Red Hat CNA-LR concluded that this CVE is not valid.…
    CVE-2026-66373 (CVSS 7.5) — Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote cod…
    CVE-2026-23631 (CVSS 6.1) — Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticat…
    CVE-2026-23479 (CVSS 7.7) — Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow do…
    CVE-2025-62507 (CVSS 7.7) — Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run…
    CVE-2025-49844 (CVSS 9.9) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46819 (CVSS 6.3) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46818 (CVSS 6) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46817 (CVSS 7) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…

    References

    https://github.com/redis/redis/releases/tag/8.6.3
    https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4
    https://access.redhat.com/errata/RHSA-2026:14316
    https://access.redhat.com/errata/RHSA-2026:23229
    https://access.redhat.com/errata/RHSA-2026:25216
    https://access.redhat.com/errata/RHSA-2026:25219
    https://access.redhat.com/errata/RHSA-2026:25925
    https://access.redhat.com/errata/RHSA-2026:26008
    https://access.redhat.com/errata/RHSA-2026:26233
    https://access.redhat.com/errata/RHSA-2026:26306
    https://access.redhat.com/errata/RHSA-2026:26540
    https://access.redhat.com/errata/RHSA-2026:27716
    https://access.redhat.com/errata/RHSA-2026:27787
    https://access.redhat.com/errata/RHSA-2026:28139
    https://access.redhat.com/errata/RHSA-2026:28142
    https://access.redhat.com/errata/RHSA-2026:29817
    https://access.redhat.com/errata/RHSA-2026:33427
    https://access.redhat.com/security/cve/CVE-2026-25243
    https://bugzilla.redhat.com/show_bug.cgi?id=2466828
    https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High