Search: CVE-2026-66373

Multiple security vulnerabilities have been identified in Redis 7 as packaged for Red Hat Enterprise Linux 9.6 Extended Update Support. These include remote code execution via a specially crafted RESTORE payload, denial of service through an out-of-bounds read in the cluster bus, arbitrary code execution via a TLS pending-data list use-after-free, and out-of-bounds read via crafted cluster bus packets. Red Hat has issued an important security update addressing these issues in Redis 7.2.16-1 for various architectures and product variants.