CVE-2026-25243

EUVD-2026-27410
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 87.33%
Affected Products (NVD)
VendorProductVersion
redisredis
𝑥
< 8.6.3
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
Red HatRed Hat Enterprise Linux 10
0:8.0.9-1.el10_2 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support
0:8.0.9-1.el10_0 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8
8100020260522105353.489197e6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
8040020260618162855.522a0ee4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
8040020260618162855.522a0ee4 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
8060020260623095617.ad008a3a ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
8060020260623095617.ad008a3a ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service
8080020260626132343.63b34585 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions
8080020260626132343.63b34585 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:6.2.22-1.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
9080020260521083756.9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9
0:8.0.9-1.el9_8 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions
0:6.2.7-1.el9_2.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
0:6.2.7-1.el9_4.6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions
9040020260618054637.9 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
0:6.2.22-1.el9_6 ≤
𝑥
< *
ADP
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support
9060020260602115714.9 ≤
𝑥
< *
ADP
Red HatRed Hat Hardened Images
9.0.4-0.1.hum1 ≤
𝑥
< *
ADP
Debian logo
Debian Releases
Debian Product
Codename
redis
bookworm
vulnerable
bookworm (security)
5:7.0.15-1~deb12u8
fixed
bullseye
5:6.0.16-1+deb11u2
fixed
bullseye (security)
5:6.0.16-1+deb11u8
fixed
forky
vulnerable
sid
vulnerable
trixie
vulnerable
trixie (security)
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
redis
bionic
needs-triage
focal
needs-triage
jammy
needs-triage
noble
needs-triage
questing
ignored
resolute
needs-triage
trusty
needs-triage
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
redis
suse enterprise server 15 SP5
6.2.6-150400.3.46.1
fixed
suse enterprise server 15 SP6
7.2.4-150600.3.24.1
fixed
redis7
suse enterprise server 15 SP5
7.0.8-150500.3.31.1
fixed
suse enterprise server 15 SP6
7.0.8-150600.8.25.1
fixed
valkey
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
valkey-compat-redis
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
valkey-devel
suse enterprise sap 15 SP7
8.0.9-150700.3.17.1
fixed
suse enterprise server 15 SP6
8.0.9-150600.13.23.1
fixed
suse enterprise server 15 SP7
8.0.9-150700.3.17.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
redis
RHEL 9
0:6.2.22-1.el9_8
fixed
redis-devel
RHEL 9
0:6.2.22-1.el9_8
fixed
redis-doc
RHEL 9
0:6.2.22-1.el9_8
fixed
valkey
RHEL 9
0:8.0.9-1.el9_8
fixed
valkey-devel
RHEL 9
0:8.0.9-1.el9_8
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
valkey
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-debuginfo
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-debugsource
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
valkey-devel
Amazon Linux 2023
0:9.0.4-1.amzn2023.0.1
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
valkey
Azure Linux 3.0
0:8.0.9-1.azl3
fixed