Search: CVE-2026-25588

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 1.3%	CVE-2026-25588redis · RedisTimeSeries RESTORE invalid memory access may allow remote code execution High7.7EPSS 1.3%2026-05-07GCVE DatabaseCVE-2026-25588 RedisTimeSeries versions prior to 1.12.14 contain a vulnerability in the RESTORE command handling that allows an authenticated attacker with RESTORE permission to supply a crafted serialized payload. This triggers invalid memory access and may lead to remote code execution. The issue is patched in version 1.12.14. A workaround is to restrict RESTORE command access via ACL rules. EPSS 1.3%Report on CVE-2026-25588 Vulnerability #bit-redis-2026-25588 #bitnami	GCVE Database	2026-05-07

Page 1 of 1 · 2 duplicate CVE records merged