CVE-2026-81934 - Redis TLS pending-data list use-after-free
Brief
CVE ID : CVE-2026-81934
Published : Aug. 27, 2026, 8:18 p. m.
- 55 minutes ago
Description : Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server. Fixed in Redis 8.
- 9, 8.
- 6, 8.
- 6, 8.
- 2, and 8.
- 1.
Severity: 9.8
- CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...