CYBERSECURITYTRACKER
Permanent story citation

Redis security advisory (AV26-423) - Update 1

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10661

As cited

Copy frozen at (site build).

vulnerabilities

Redis security advisory (AV26-423) - Update 1

Redis published a security advisory on May 5, 2026, addressing multiple vulnerabilities in Redis Software and open-source releases. An update issued on October 19, 2026, indicates that CVE-2026-25243 is being actively exploited in the wild, prompting authorities to recommend immediate patching.

Why it matters: Organizations running Redis Software or open-source Redis must patch immediately, particularly to address CVE-2026-25243, which is under active exploitation.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary