The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade redis-docUpgrade redis-develUpgrade redis | Oct 11, 2026 | Sep 8, 2026 |
| Debian | — | Upgrade redis | Sep 30, 2026 | Aug 27, 2026 |
| Redhat_linux | — | Upgrade redis-docUpgrade redis-develUpgrade redis-debugsourceUpgrade redisUpgrade redis-debuginfo | Sep 3, 2026 | Aug 27, 2026 |
| Redislabs Redis | — | Upgrade RedisLabs Redis to version 7.4.11Upgrade RedisLabs Redis to version 7.2.16Upgrade RedisLabs Redis to version 8.2.9Upgrade RedisLabs Redis to version 8.6.6Upgrade RedisLabs Redis to version 6.2.24Upgrade RedisLabs Redis to version 8.8.2Upgrade RedisLabs Redis to version 8.4.6Upgrade RedisLabs Redis to version 8.10.1 | Aug 28, 2026 | Aug 27, 2026 |
| Rocky_linux | — | Upgrade redisUpgrade redis-debuginfoUpgrade redis-debugsourceUpgrade redis-devel | Sep 10, 2026 | Sep 9, 2026 |
| Ubuntu | — | Upgrade redis-toolsUpgrade redis-sentinelUpgrade redis-serverUpgrade redis | Oct 7, 2026 | Oct 6, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub