CVE-2026-81934CWE-416

CVE-2026-81934

High · published August 28, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00479 · 40.5th percentile
Weakness
CWE-416 · Use After Free
Published
2026-08-28T00:18Z
References (24)
https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/6.2.24 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/7.2.16 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/7.4.11 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/8.10.1 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/8.2.9 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/8.4.6 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/8.6.6 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/redis/redis/releases/tag/8.8.2 · 9119a7d8-5eab-497f-8521-727c672e3725https://github.com/v12-security/pocs/tree/main/redis/server_ssl · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES · 9119a7d8-5eab-497f-8521-727c672e3725https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/ · 9119a7d8-5eab-497f-8521-727c672e3725https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/ · 9119a7d8-5eab-497f-8521-727c672e3725https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/ · 9119a7d8-5eab-497f-8521-727c672e3725https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/ · 9119a7d8-5eab-497f-8521-727c672e3725https://www.cve.org/CVERecord?id=CVE-2026-81934 · 9119a7d8-5eab-497f-8521-727c672e3725
EPSS history
Timeline
  • 27 AUG 19:40Z
    Redis TLS pending-data list use-after-free
    cvelistv5