CVE-2026-81934 - Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1. - 漏洞详情

漏洞编号：CVE-2026-81934

风险等级：危急

漏洞来源：CVE

CVE 编号：CVE-2026-81934

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-416

发布/更新时间：2026-08-27 / 2026-08-28

漏洞描述

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.2.9, 8.4.6, 8.6.6, 8.8.2, and 8.10.1.

漏洞描述

相关链接

相关漏洞