Nothing@hadi_ynwl
بهجز CVE-2025-62507 (روی 8.2.0–8.2.2)، این کمپین از CVE-2026-23479، CVE-2026-25243، CVE-2026-25588/25589 و روی نسخههای قدیمیتر از CVE-2025-49844 (Redis2Shell) هم استفاده میکنه./۴
1001099
547 followersView on X
CVE-2025-62507(redis / redis)
LOWCVSS 8.8 · HIGHImmediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this issue without patching the redis-server executable is to prevent users from executing XACKDEL operation. This can be done using ACL to restrict XACKDEL command.
0.0/ 10 priority
Sources & remediation
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-20CWE-121CWE-787
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- redis
Affected systems
Vendors
Products
redis
Deep dive
Full discourse1 post
CPE platform detail1 entries
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redis | redis | - | - | - |