Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2026-81934 Details
Description
Redis contains a use-after-free vulnerability in the 'tlsProcessPendingData()' function, which handles the TLS pending-data list if Redis is configured with TLS support. A remote, unauthenticated attacker may be able to execute arbitrary commands with the privileges of the Redis server.
Metrics
CVSS 4.0 Severity and Vector Strings:
CNA: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian GovernmentCVSS-B:7.5 HIGHVector:CVSS:4.0/AV:A/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS 3.x Severity and Vector Strings:
CNA: Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian GovernmentCVSS-B:7.1 HIGHVector:CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 28, 2026Exploitation: PocAutomatable: NoTechnical Impact: Total
CISA-ADP
Assessed Aug 27, 2026Exploitation: PocAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/redis/redis/commit/6d088c335d5c3ec49a6c28486140b498e70b7834 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/6.2.24 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/7.2.16 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/7.4.11 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/8.10.1 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/8.2.9 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/8.4.6 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/8.6.6 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/redis/redis/releases/tag/8.8.2 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://github.com/v12-security/pocs/tree/main/redis/server_ssl | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-26-239-01.json | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/6.2/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/7.2/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/7.4/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/8.10/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/8.2/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/8.4/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/8.6/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://raw.githubusercontent.com/redis/redis/8.8/00-RELEASENOTES | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://redis.io/docs/latest/operate/rs/release-notes/rs-7-22-releases/rs-7-22-2-179/ | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://redis.io/docs/latest/operate/rs/release-notes/rs-7-8-releases/rs-7-8-6-303/ | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://redis.io/docs/latest/operate/rs/release-notes/rs-8-0-releases/rs-8-0-20-96/ | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://redis.io/docs/latest/operate/rs/release-notes/rs-8-2-releases/rs-8-2-0-46/ | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government | |
| https://www.cve.org/CVERecord?id=CVE-2026-81934 | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-416 | Use After Free | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |
Affected Products
No affected product data is available for this CVE.
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 31, 2026 | CVE Modified | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |
| Aug 28, 2026 | CVE Modified | CISA-ADP |
| Aug 27, 2026 | New CVE Received | Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government |