Threats tagged 'bit-redis-2026-25588'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 1.3%	CVE-2026-25588redis · RedisTimeSeries RESTORE invalid memory access may allow remote code execution HighEPSS 1.3%2026-05-07GCVE DatabaseCVE-2026-25588 RedisTimeSeries versions prior to 1.12.14 contain a vulnerability in the RESTORE command handling that allows an authenticated attacker with RESTORE permission to supply a crafted serialized payload. This triggers invalid memory access and may lead to remote code execution. The issue is patched in version 1.12.14. A workaround is to restrict RESTORE command access via ACL rules. EPSS 1.3%Vulnerability #bit-redis-2026-25588 #bitnami	GCVE Database	2026-05-07

Page 1 of 1