CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
CVSS Score
7.1
EPSS Score
0.5%
EPSS Percentile
44th
A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).
| CWE | CWE-125 |
| Vendor | red hat |
| Product | red hat enterprise linux 10 |
| Published | Sep 17, 2026 |
| Last Updated | Oct 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for red hat red hat enterprise linux 10
Be the first to know when new high vulnerabilities affecting red hat red hat enterprise linux 10 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High
Affected Versions
Red Hat / Red Hat Enterprise Linux 10
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
All versions affected Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected Red Hat / Pen Drive Powered by Red Hat Lightspeed
All versions affected Red Hat / Red Hat 3scale API Management Platform 2
All versions affected Red Hat / Red Hat 3scale API Management Platform 2
All versions affected Red Hat / Red Hat 3scale API Management Platform 2
All versions affected Red Hat / Red Hat Enterprise Linux 8
All versions affected Red Hat / Red Hat Enterprise Linux 9
All versions affected Red Hat / Red Hat Hardened Images
All versions affected References
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3443 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:3507 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65120 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:69520 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:69521 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-92925 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2535971 github.com: https://github.com/redis/redis/commit/37894faeea11e2db28b9fc2af378a762d2c36523 github.com: https://github.com/redis/redis/pull/15263 github.com: https://github.com/redis/redis/releases/tag/8.10.0