Vulnpedia
← All CVEs

CVE-2026-25243

HIGH 7.7 PoC CATALOGUED ALL-YEARS

Published 2026-05-05 · Last modified 2026-07-16 · GitHub_M · NVD: Modified

Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted serialized payload that triggers invalid memory access and may lead to remote code execution. A workaround is to restrict access to the RESTORE command with ACL rules. This is patched in version 8.6.3.

REPORTED EXPLOITATION

VulnCheck KEV reports exploitation for this CVE. These are source-specific reports; review the details and vendor guidance below.

Exploitation likelihood

4.0%chance of exploitation in 30 days · 91st percentile

○ In CISA KEV● Catalogued PoC◆ SSVC: exploitation none, automatable no

Impact if exploited

7.7CVSS 4.0 · HIGH · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ⚠Complexity: Needs a race window or specific setup
  • ✓Requirements: No special attack requirements

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Resource commands

curl -s https://vulnpedia.com/cve/CVE-2026-25243/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Redis Red Hat

Products Redis Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 10.0 Extended Update Support Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.4 Extended Update Support Long Life Add On Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support Red Hat Enterprise Linux 8.6 Extended Update Support Long Life Add On Red Hat Enterprise Linux 8.8 Telecommunications Update Service Red Hat Enterprise Linux 8.8 Update Services For Sap Solutions Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 9.2 Update Services For Sap Solutions Red Hat Enterprise Linux 9.4 Update Services For Sap Solutions Red Hat Enterprise Linux 9.6 Extended Update Support Red Hat Hardened Images

Weakness (CWE)

  • CWE-122: : Heap-based Buffer Overflow

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References and research data (JSON)

Vendor product assessments

Showing 32 of 252 vendor product statements; 220 omitted. Read the full vendor advisory.

  • valkey-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_0?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-devel-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64&rpmmod=redis:6:8100020260522105353:489197e6

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64&rpmmod=redis:6:8100020260522105353:489197e6

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:6.0.9-5.module+el8.4.0+24416+a7ffbc5f.6.src (redis:6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.4.0%2B24416%2Ba7ffbc5f.6?arch=src&rpmmod=redis:6:8040020260618162855:522a0ee4

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debugsource-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.6.0%2B24434%2Bc7b1e4bc.7?arch=x86_64&rpmmod=redis:6:8060020260623095617:ad008a3a

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-doc-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.noarch (redis:6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.6.0%2B24434%2Bc7b1e4bc.7?arch=noarch&rpmmod=redis:6:8060020260623095617:ad008a3a

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:6.2.7-1.module+el8.8.0+24465+9d14ca70.7.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel8.8.0%2B24465%2B9d14ca70.7?arch=ppc64le&rpmmod=redis:6:8080020260626132343:63b34585

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.6?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debuginfo-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.6?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:6.2.7-1.el9_2.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_2.6?arch=i686

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:6.2.7-1.el9_4.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.6?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debuginfo-0:6.2.7-1.el9_4.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.6?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debugsource-0:6.2.7-1.el9_4.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.6?arch=i686

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:6.2.7-1.el9_4.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.6?arch=i686

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-doc-0:6.2.7-1.el9_4.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_4.6?arch=noarch

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64&rpmmod=redis:7:9060020260602115714:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debugsource-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_6?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le&rpmmod=redis:7:9080020260521083756:9

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-0:8.0.9-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=src

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-debugsource-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_8?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • valkey-main@x86_64 as a component of Red Hat Hardened Images · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Vendor guidance
    • workaround: To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules.
    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00
  • boost.src as a component of Red Hat Hardened Images · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:rpm/redhat/[email protected]?arch=src

    Red Hat · CVE-2026-25243 · Updated 2026-07-15T14:17:52+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

3 candidates

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

  • VulnCheck KEV · 2026-10-17T00:00:00Z

    Source guidance: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.

    Source ransomware assessment: Unknown

    VulnCheck KEV · CVE-2026-25243 · Updated 2026-10-17T00:00:00Z
  • VulnCheck KEV · 2026-10-17T00:00:00ZVulnCheck KEV · CVE-2026-25243

Known Affected Software Configurations

VendorProductVersion range
RedisRedis< 8.6.3

All CVSS metrics

  • HIGH 7.7 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  • HIGH 8.8 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • HIGH 7.7 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • HIGH 8.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS