The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade redis | Dec 5, 2025 | Nov 4, 2025 |
| Freebsd | — | Upgrade redis | Dec 10, 2025 | Nov 3, 2025 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 8.2.3 | Apr 17, 2026 | Nov 4, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub