{"schema":"vulnpedia.research/1","cve":"CVE-2026-23631","references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826","tags":["x_refsource_CONFIRM","Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:39:32.337Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:39:32.337Z","url":"https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://github.com/redis/redis/security/advisories/GHSA-8ghh-qpmp-7826"}]},{"url":"https://github.com/redis/redis/releases/tag/8.6.3","tags":["x_refsource_MISC","Release Notes","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:39:32.337Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:39:32.337Z","url":"https://github.com/redis/redis/releases/tag/8.6.3"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://github.com/redis/redis/releases/tag/8.6.3"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://github.com/redis/redis/releases/tag/8.6.3"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-23631","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/security/cve/CVE-2026-23631"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/security/cve/CVE-2026-23631"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-23631"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466788","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466788"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466788"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466788"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","tags":["x_sadp-csaf-vex","vendor-advisory"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26540","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26540"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25216","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25216"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:33444","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:33444"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26306","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26306"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25219","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25219"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25925","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25925"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:14316","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:50.140Z","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"source":"nvd","sourceId":"CVE-2026-23631","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://access.redhat.com/errata/RHSA-2026:14316"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-23631","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-23631"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23631","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23631"}]},{"source":"euvd","sourceId":"EUVD-2026-27398","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27398","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-27398","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27398"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/yoyosh/DarkReplica","source":"poc-in-github","sourceId":"CVE-2026-23631","description":"CVE-2026-23631 (DarkReplica) Redis Exploit","modified":"2026-09-08T15:59:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-23631","url":"https://github.com/yoyosh/DarkReplica"},{"source":"poc-in-github","sourceId":"CVE-2026-23631","modified":"2026-09-08T15:59:09Z","url":"https://github.com/yoyosh/DarkReplica"}],"tags":[]},{"url":"https://github.com/HORKimhab/CVE-2026-23631","source":"poc-in-github","sourceId":"CVE-2026-23631","description":"CVE-2026-23631-Draft","modified":"2026-06-04T01:22:36Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-23631","url":"https://github.com/HORKimhab/CVE-2026-23631"},{"source":"poc-in-github","sourceId":"CVE-2026-23631","modified":"2026-06-04T01:22:36Z","url":"https://github.com/HORKimhab/CVE-2026-23631"}],"tags":[]}],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64","product":"valkey-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.aarch64","product":"valkey-debuginfo-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.0.Z.E2S:valkey-debugsource-0:8.0.9-1.el10_0.s390x","product":"valkey-debugsource-0:8.0.9-1.el10_0.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_0?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.0.Z.E2S:valkey-devel-0:8.0.9-1.el10_0.x86_64","product":"valkey-devel-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.x86_64","product":"valkey-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.2.Z:valkey-debugsource-0:8.0.9-1.el10_2.ppc64le","product":"valkey-debugsource-0:8.0.9-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el10_2?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.s390x","product":"valkey-devel-0:8.0.9-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.4.0.Z.E4S:redis-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.src::redis:7","product":"redis-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.src (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis@7.0.12-2.module%2Bel9.4.0%2B24450%2Be284b512.8?arch=src&rpmmod=redis:7:9040020260625094332:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.4.0.Z.E4S:redis-debugsource-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64::redis:7","product":"redis-debugsource-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-debugsource@7.0.12-2.module%2Bel9.4.0%2B24450%2Be284b512.8?arch=aarch64&rpmmod=redis:7:9040020260625094332:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.4.0.Z.E4S:redis-devel-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le::redis:7","product":"redis-devel-0:7.0.12-2.module+el9.4.0+24450+e284b512.8.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:33444"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-devel@7.0.12-2.module%2Bel9.4.0%2B24450%2Be284b512.8?arch=ppc64le&rpmmod=redis:7:9040020260625094332:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7","product":"redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7","product":"redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.6.0.Z.EUS:redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64::redis:7","product":"redis-debugsource-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=x86_64&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.6.0.Z.EUS:redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch::redis:7","product":"redis-doc-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.noarch (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-doc@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=noarch&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7","product":"redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7","product":"redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7","product":"redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.s390x","product":"valkey-0:8.0.9-1.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:valkey-debuginfo-0:8.0.9-1.el9_8.x86_64","product":"valkey-debuginfo-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:valkey-devel-0:8.0.9-1.el9_8.aarch64","product":"valkey-devel-0:8.0.9-1.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-devel@8.0.9-1.el9_8?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"Red Hat Hardened Images:valkey-0:9.0.4-0.1.hum1@src","product":"valkey-0:9.0.4-0.1.hum1@src as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey@9.0.4-0.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"Red Hat Hardened Images:valkey-devel-0:9.0.4-0.1.hum1@aarch64","product":"valkey-devel-0:9.0.4-0.1.hum1@aarch64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-devel@9.0.4-0.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"Red Hat Hardened Images:valkey-rdma-0:9.0.4-0.1.hum1@x86_64","product":"valkey-rdma-0:9.0.4-0.1.hum1@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."}],"purl":"pkg:rpm/redhat/valkey-rdma@9.0.4-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_9:redis","product":"redis as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/redis","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_9:redis-devel","product":"redis-devel as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/redis-devel","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_9:redis-doc","product":"redis-doc as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/redis-doc","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_9:redis.src","product":"redis.src as a component of Red Hat Enterprise Linux 9","status":"known_affected","remediations":[{"category":"workaround","details":"To mitigate this flaw, ensure that Redis replicas maintain `replica-read-only` as enabled and prevent its modification by unauthorized users. If Lua scripting is not a required feature, consider disabling it to reduce the attack surface. Restricting network access to Redis instances to trusted clients can also limit exposure.\nFor Redis configuration, edit the `redis.conf` file to include or verify:\n`replica-read-only yes`\nAfter modifying the configuration, restart the Redis service for the changes to take effect. This action will temporarily interrupt service availability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:rpm/redhat/redis?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_8:redis-devel::redis:6","product":"redis-devel (redis:6) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/redis-devel?rpmmod=redis:6","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_8:redis-doc::redis:6","product":"redis-doc (redis:6) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/redis-doc?rpmmod=redis:6","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_8:redis.src::redis:6","product":"redis.src (redis:6) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/redis?arch=src&rpmmod=redis:6","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_enterprise_linux_8:redis::redis:6","product":"redis (redis:6) as a component of Red Hat Enterprise Linux 8","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:rpm/redhat/redis?rpmmod=redis:6","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]},{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json","productId":"red_hat_hardened_images:boost.src","product":"boost.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:rpm/redhat/boost@1.90.0-7.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-23631","modified":"2026-10-06T17:38:40+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23631.json"}]}],"vendorCoverage":{"total":127,"shown":32,"omitted":95,"source":"redhat"}}