Redis security advisory (AV26-859)
Brief
Serial Number: AV26-859
Date: August 28, 2026
As of August 27, 2026, Redis is affected by a vulnerability in the following product:
- Redis
- 8.0
- All except 8.10.1
- All except 8.2.9
- All except 8.4.6
- All except 8.6.6
- All except 8.8.2
The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.
- Fix use-after-free in tlsProcessPendingData() pending-list iteration
- GitHub Releases
Redis security advisory (AV26-859) - Canadian Centre for Cyber Security