CVE Feed

    Dashboard / CVE / CVE-2026-81934

    CVE-2026-81934

    Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

    Published:Aug 27, 2026
    Last Modified:Aug 31, 2026
    EPS:Aug 27, 2026
    EPSS Score:0.00435
    CVSS Score:7.1

    Affected Products

    Vendor
    Redis
    Product
    Redis

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-416 Use After Free

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-72568 (CVSS 7.1) — Red Hat CNA-LR concluded that this CVE is not valid.…
    CVE-2026-66373 (CVSS 7.5) — Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote cod…
    CVE-2026-25243 (CVSS 7.7) — Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does …
    CVE-2026-23631 (CVSS 6.1) — Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticat…
    CVE-2026-23479 (CVSS 7.7) — Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow do…
    CVE-2025-62507 (CVSS 7.7) — Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run…
    CVE-2025-49844 (CVSS 9.9) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46819 (CVSS 6.3) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46818 (CVSS 6) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…
    CVE-2025-46817 (CVSS 7) — Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authentic…

    References

    https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834
    https://github.com/redis/redis/releases/tag/6.2.24
    https://github.com/redis/redis/releases/tag/7.2.16
    https://github.com/redis/redis/releases/tag/7.4.11
    https://github.com/redis/redis/releases/tag/8.10.1
    https://github.com/redis/redis/releases/tag/8.2.9
    https://github.com/redis/redis/releases/tag/8.4.6
    https://github.com/redis/redis/releases/tag/8.6.6
    https://github.com/redis/redis/releases/tag/8.8.2
    https://github.com/v12-security/pocs/tree/main/redis/server_ssl
    https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json
    https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES
    https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES
    https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/
    https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/
    https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/
    https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/
    https://www.cve.org/CVERecord?id=CVE-2026-81934

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High