Search: CVE-2026-25589

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.7	EPSS 1.7%	CVE-2026-25589redis · RedisBloom RESTORE invalid memory access may allow remote code execution High7.7EPSS 1.7%2026-05-07GCVE DatabaseCVE-2026-25589 RedisBloom versions prior to 2.8.20 contain a vulnerability in the RESTORE command handling that allows an authenticated attacker with RESTORE permission to supply crafted serialized payloads. This can cause invalid memory access and potentially lead to remote code execution. The issue is fixed in RedisBloom version 2.8.20. A workaround is to restrict RESTORE command access using ACL rules. EPSS 1.7%Report on CVE-2026-25589 Vulnerability #bit-redis-2026-25589 #bitnami	GCVE Database	2026-05-07

Page 1 of 1 · 2 duplicate CVE records merged