{"schema":"vulnpedia.research/1","cve":"CVE-2026-25243","references":[{"url":"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4","tags":["x_refsource_CONFIRM","Mitigation","Vendor Advisory","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:44:57.306Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:44:57.306Z","url":"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://github.com/redis/redis/security/advisories/GHSA-c8h9-259x-jff4"}]},{"url":"https://github.com/redis/redis/releases/tag/8.6.3","tags":["x_refsource_MISC","Release Notes","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:44:57.306Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-05-05T16:44:57.306Z","url":"https://github.com/redis/redis/releases/tag/8.6.3"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://github.com/redis/redis/releases/tag/8.6.3"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://github.com/redis/redis/releases/tag/8.6.3"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-25243","tags":["vdb-entry","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/security/cve/CVE-2026-25243"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/security/cve/CVE-2026-25243"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-25243"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466828","tags":["issue-tracking","x_refsource_REDHAT","vendor-reference"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466828"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466828"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2466828"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","tags":["x_sadp-csaf-vex","vendor-advisory"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26540","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26540"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25216","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25216"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26008","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:26008"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26008"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26008"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:27787","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:27787"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:27787"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:27787"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:29817","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:29817"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:29817"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:29817"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:33427","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:33427"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:33427"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:33427"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:27716","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:27716"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:28139","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:28139"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:28142","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:28142"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:28142"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:28142"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26233","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:26233"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26233"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26233"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:26306","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:26306"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:23229","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:23229"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:23229"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:23229"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25219","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25219"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:25925","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:25925"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:14316","tags":["vendor-advisory","x_refsource_REDHAT","vendor-remediation"],"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","origins":[{"source":"mitre","sourceId":"redhat-SADP","modified":"2026-07-16T12:04:33.393Z","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"source":"nvd","sourceId":"CVE-2026-25243","modified":"2026-07-25T11:10:00.100","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://access.redhat.com/errata/RHSA-2026:14316"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-25243","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-25243"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25243","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25243"}]},{"source":"euvd","sourceId":"EUVD-2026-27410","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27410","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-27410","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27410"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2026-25243","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://x.com/DefusedCyber/status/2111394668713857446","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2026-25243","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","modified":"2026-10-17T00:00:00Z","url":"https://x.com/DefusedCyber/status/2111394668713857446"}]},{"url":"https://vulncheck.com/xdb/290d7c0b9124","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"290d7c0b9124","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"290d7c0b9124","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/290d7c0b9124"}]},{"url":"https://github.com/dinosn/CVE-2026-25243","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"290d7c0b9124","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"290d7c0b9124","modified":"2026-10-17T00:00:00Z","url":"https://github.com/dinosn/CVE-2026-25243"}]},{"url":"https://vulncheck.com/xdb/9c83719798f5","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"9c83719798f5","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9c83719798f5","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/9c83719798f5"}]},{"url":"https://github.com/dinosn/CVE-2026-25243-debugfree","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"9c83719798f5","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"9c83719798f5","modified":"2026-10-17T00:00:00Z","url":"https://github.com/dinosn/CVE-2026-25243-debugfree"}]},{"url":"https://vulncheck.com/xdb/4e08c979aa2f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"4e08c979aa2f","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4e08c979aa2f","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/4e08c979aa2f"}]},{"url":"https://github.com/captain-woof/CVE-2026-25243","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"4e08c979aa2f","modified":"2026-10-17T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4e08c979aa2f","modified":"2026-10-17T00:00:00Z","url":"https://github.com/captain-woof/CVE-2026-25243"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/dinosn/CVE-2026-25243","source":"poc-in-github","sourceId":"CVE-2026-25243","description":"CVE-2026-25243 — Redis RESTORE zipmap double-free → remote code execution (ASLR on).","modified":"2026-08-06T16:03:03Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-25243","url":"https://github.com/dinosn/CVE-2026-25243"},{"source":"poc-in-github","sourceId":"CVE-2026-25243","modified":"2026-08-06T16:03:03Z","url":"https://github.com/dinosn/CVE-2026-25243"}],"tags":[]},{"url":"https://github.com/dinosn/CVE-2026-25243-debugfree","source":"poc-in-github","sourceId":"CVE-2026-25243","modified":"2026-07-23T13:44:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-25243","url":"https://github.com/dinosn/CVE-2026-25243-debugfree"},{"source":"poc-in-github","sourceId":"CVE-2026-25243","modified":"2026-07-23T13:44:04Z","url":"https://github.com/dinosn/CVE-2026-25243-debugfree"}],"tags":[]},{"url":"https://github.com/captain-woof/CVE-2026-25243","source":"poc-in-github","sourceId":"CVE-2026-25243","description":"Stable POC for CVE-2026-25243 (Redis RESTORE double-free -> remote code execution)","modified":"2026-08-11T07:48:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2026-25243","url":"https://github.com/captain-woof/CVE-2026-25243"},{"source":"poc-in-github","sourceId":"CVE-2026-25243","modified":"2026-08-11T07:48:14Z","url":"https://github.com/captain-woof/CVE-2026-25243"}],"tags":[]}],"cataloguedPoc":[{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"290d7c0b9124","url":"https://vulncheck.com/xdb/290d7c0b9124","cve":"CVE-2026-25243","dateAdded":"2026-07-23T17:51:07Z","modified":"2026-10-17T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/dinosn/CVE-2026-25243","observations":[{"dateAdded":"2026-07-23T17:51:07Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"290d7c0b9124","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/290d7c0b9124"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"9c83719798f5","url":"https://vulncheck.com/xdb/9c83719798f5","cve":"CVE-2026-25243","dateAdded":"2026-07-23T18:54:12Z","modified":"2026-10-17T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/dinosn/CVE-2026-25243-debugfree","observations":[{"dateAdded":"2026-07-23T18:54:12Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"9c83719798f5","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/9c83719798f5"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"4e08c979aa2f","url":"https://vulncheck.com/xdb/4e08c979aa2f","cve":"CVE-2026-25243","dateAdded":"2026-08-06T17:55:54Z","modified":"2026-10-17T00:00:00Z","exploitType":"remote-with-credentials","repositoryUrl":"https://github.com/captain-woof/CVE-2026-25243","observations":[{"dateAdded":"2026-08-06T17:55:54Z","exploitType":"remote-with-credentials"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"4e08c979aa2f","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/xdb/4e08c979aa2f"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-10.0.Z.E2S:valkey-0:8.0.9-1.el10_0.aarch64","product":"valkey-0:8.0.9-1.el10_0.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el10_0?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-10.0.Z.E2S:valkey-debuginfo-0:8.0.9-1.el10_0.x86_64","product":"valkey-debuginfo-0:8.0.9-1.el10_0.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26540"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_0?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-10.2.Z:valkey-0:8.0.9-1.el10_2.aarch64","product":"valkey-0:8.0.9-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el10_2?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-10.2.Z:valkey-debuginfo-0:8.0.9-1.el10_2.x86_64","product":"valkey-debuginfo-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey-debuginfo@8.0.9-1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-10.2.Z:valkey-devel-0:8.0.9-1.el10_2.x86_64","product":"valkey-devel-0:8.0.9-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25216"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey-devel@8.0.9-1.el10_2?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6","product":"redis-debuginfo-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26008"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debuginfo@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64&rpmmod=redis:6:8100020260522105353:489197e6","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.10.0.Z.MAIN.EUS:redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64::redis:6","product":"redis-devel-0:6.2.22-1.module+el8.10.0+24332+dbd3b426.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream (v. 8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26008"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@6.2.22-1.module%2Bel8.10.0%2B24332%2Bdbd3b426?arch=x86_64&rpmmod=redis:6:8100020260522105353:489197e6","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.4.0.Z.EUS.EXTENSION:redis-0:6.0.9-5.module+el8.4.0+24416+a7ffbc5f.6.src::redis:6","product":"redis-0:6.0.9-5.module+el8.4.0+24416+a7ffbc5f.6.src (redis:6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:27787"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@6.0.9-5.module%2Bel8.4.0%2B24416%2Ba7ffbc5f.6?arch=src&rpmmod=redis:6:8040020260618162855:522a0ee4","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.6.0.Z.AUS:redis-debugsource-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.x86_64::redis:6","product":"redis-debugsource-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.x86_64 (redis:6) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:29817"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debugsource@6.0.9-5.module%2Bel8.6.0%2B24434%2Bc7b1e4bc.7?arch=x86_64&rpmmod=redis:6:8060020260623095617:ad008a3a","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.6.0.Z.EUS.EXTENSION:redis-doc-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.noarch::redis:6","product":"redis-doc-0:6.0.9-5.module+el8.6.0+24434+c7b1e4bc.7.noarch (redis:6) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:29817"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-doc@6.0.9-5.module%2Bel8.6.0%2B24434%2Bc7b1e4bc.7?arch=noarch&rpmmod=redis:6:8060020260623095617:ad008a3a","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-8.8.0.Z.E4S:redis-devel-0:6.2.7-1.module+el8.8.0+24465+9d14ca70.7.ppc64le::redis:6","product":"redis-devel-0:6.2.7-1.module+el8.8.0+24465+9d14ca70.7.ppc64le (redis:6) as a component of Red Hat Enterprise Linux AppStream E4S (v.8.8)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:33427"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@6.2.7-1.module%2Bel8.8.0%2B24465%2B9d14ca70.7?arch=ppc64le&rpmmod=redis:6:8080020260626132343:63b34585","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.2.0.Z.E4S:redis-0:6.2.7-1.el9_2.6.aarch64","product":"redis-0:6.2.7-1.el9_2.6.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@6.2.7-1.el9_2.6?arch=aarch64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.2.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_2.6.s390x","product":"redis-debuginfo-0:6.2.7-1.el9_2.6.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_2.6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.2.0.Z.E4S:redis-devel-0:6.2.7-1.el9_2.6.i686","product":"redis-devel-0:6.2.7-1.el9_2.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:27716"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@6.2.7-1.el9_2.6?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.4.0.Z.E4S:redis-0:6.2.7-1.el9_4.6.x86_64","product":"redis-0:6.2.7-1.el9_4.6.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@6.2.7-1.el9_4.6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.4.0.Z.E4S:redis-debuginfo-0:6.2.7-1.el9_4.6.ppc64le","product":"redis-debuginfo-0:6.2.7-1.el9_4.6.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debuginfo@6.2.7-1.el9_4.6?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.4.0.Z.E4S:redis-debugsource-0:6.2.7-1.el9_4.6.i686","product":"redis-debugsource-0:6.2.7-1.el9_4.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debugsource@6.2.7-1.el9_4.6?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.4.0.Z.E4S:redis-devel-0:6.2.7-1.el9_4.6.i686","product":"redis-devel-0:6.2.7-1.el9_4.6.i686 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@6.2.7-1.el9_4.6?arch=i686","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.4.0.Z.E4S:redis-doc-0:6.2.7-1.el9_4.6.noarch","product":"redis-doc-0:6.2.7-1.el9_4.6.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.4)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:28139"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-doc@6.2.7-1.el9_4.6?arch=noarch","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.6.0.Z.EUS:redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le::redis:7","product":"redis-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=ppc64le&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.6.0.Z.EUS:redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64::redis:7","product":"redis-debuginfo-0:7.2.14-1.module+el9.6.0+24344+1bc33ec7.aarch64 (redis:7) as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26306"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.6.0%2B24344%2B1bc33ec7?arch=aarch64&rpmmod=redis:7:9060020260602115714:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.6.0.Z.EUS:redis-debugsource-0:6.2.22-1.el9_6.x86_64","product":"redis-debugsource-0:6.2.22-1.el9_6.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26233"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debugsource@6.2.22-1.el9_6?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.6.0.Z.EUS:redis-devel-0:6.2.22-1.el9_6.s390x","product":"redis-devel-0:6.2.22-1.el9_6.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.6)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:26233"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@6.2.22-1.el9_6?arch=s390x","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-0:6.2.22-1.el9_8.ppc64le","product":"redis-0:6.2.22-1.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:23229"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@6.2.22-1.el9_8?arch=ppc64le","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64::redis:7","product":"redis-0:7.2.14-1.module+el9.8.0+24327+41ceb644.x86_64 (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=x86_64&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7","product":"redis-debuginfo-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debuginfo@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x::redis:7","product":"redis-debugsource-0:7.2.14-1.module+el9.8.0+24327+41ceb644.s390x (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-debugsource@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=s390x&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le::redis:7","product":"redis-devel-0:7.2.14-1.module+el9.8.0+24327+41ceb644.ppc64le (redis:7) as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25219"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/redis-devel@7.2.14-1.module%2Bel9.8.0%2B24327%2B41ceb644?arch=ppc64le&rpmmod=redis:7:9080020260521083756:9","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:valkey-0:8.0.9-1.el9_8.src","product":"valkey-0:8.0.9-1.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey@8.0.9-1.el9_8?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"AppStream-9.8.0.Z.MAIN.EUS:valkey-debugsource-0:8.0.9-1.el9_8.x86_64","product":"valkey-debugsource-0:8.0.9-1.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258","url":"https://access.redhat.com/errata/RHSA-2026:25925"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey-debugsource@8.0.9-1.el9_8?arch=x86_64","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"Red Hat Hardened Images:valkey-main@x86_64","product":"valkey-main@x86_64 as a component of Red Hat Hardened Images","status":"fixed","remediations":[{"category":"vendor_fix","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","url":"https://access.redhat.com/errata/RHSA-2026:14316"},{"category":"workaround","details":"To mitigate this flaw, restrict the execution privileges of the RESTORE command exclusively to highly trusted and administrative users by using the appropriate ACL rules."}],"purl":"pkg:rpm/redhat/valkey@9.0.4-0.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]},{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json","productId":"red_hat_hardened_images:boost.src","product":"boost.src as a component of Red Hat Hardened Images","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:rpm/redhat/boost@1.90.0-7.hum1?arch=src","origins":[{"source":"redhat","sourceId":"CVE-2026-25243","modified":"2026-07-15T14:17:52+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25243.json"}]}],"vendorCoverage":{"total":252,"shown":32,"omitted":220,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-17T00:00:00Z","modified":"2026-10-17T00:00:00Z","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"Redis","product":"redis","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","modified":"2026-10-17T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","catalog":"VulnCheck KEV","kind":"report","url":"https://x.com/DefusedCyber/status/2111394668713857446","dateAdded":"2026-10-17T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2026-25243","url":"https://x.com/DefusedCyber/status/2111394668713857446"}]}]}