CVE-2026-27623General(lfprojects / valkey)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system to abort by triggering an assertion. When processing incoming requests, the Valkey system does not properly reset the networking state after processing an empty request. A malicious actor can then send a request that the server incorrectly identifies as breaking server side invariants, which results in the server shutting down. Version 9.0.3 fixes the issue. As an additional mitigation, properly isolate Valkey deployments so that only trusted users have access.

lfprojects CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/valkey-io/valkey/security/advisories/GHSA-93p9-5vc7-8wgr

Other references

Weakness type (CWE)

CWE-20CWE-617

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

valkey

Threat summary

4 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
General: 3 classified signals
Disclosure: 1 classified signal
Peaked 3d ago at 1 mentions (2026-02-23); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

lfprojects

Products

valkey

Deep dive

Activity timeline4 mentions / 4d

Signal classification2 categories

General

375.0%

Disclosure

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-23	1	Disclosure1
2026-02-24	1	General1
2026-02-27	1	General1
2026-02-28	1	General1

Full discourse4 posts

CRAC Learning - Tech@cracbot223d
General
CVE-2026-27623 (CVSS:7.5, HIGH) is Analyzed. Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with..https://nvd.nist.gov/vuln/detail/CVE-2026-27623 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
CVE-2026-27623 was analyzed and its CVSS score noted, but the post lacks PoC, exploit code, active exploitation claims, patch information, or detailed technical vulnerability descriptions.
0000021
173 followersView on X
CRAC Learning - Tech@cracbot224d
General
CVE-2026-27623 (CVSS:7.5, HIGH) is Analyzed. Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with..https://nvd.nist.gov/vuln/detail/CVE-2026-27623 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
High severity CVE-2026-27623 affecting Valkey 9.0.0–9.0.3 is reported, but no PoC, exploit, patch, or active exploitation details are provided.
0000042
173 followersView on X
CVE@CVEnew227d
General
CVE-2026-27623 Valkey is a distributed key-value database. Starting in version 9.0.0 and prior to version 9.0.3, a malicious actor with network access to Valkey can cause the system… https://www.cve.org/CVERecord?id=CVE-2026-27623
Post summary
The statement notes CVE‑2026‑27623 affects Valkey versions 9.0.0‑9.0.3, but offers no further technical or operational details.
00000117
56.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds227d
Disclosure
CVE-2026-27623 Denial of Service Vulnerability in Valkey 9.0.0 Through 9.0.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-27623
Post summary
A Denial of Service vulnerability (CVE-2026-27623) affecting Valkey versions 9.0.0 through 9.0.2 has been disclosed, with no PoC, exploit, or patch details provided.
0000050
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	lfprojects	valkey	-	-	-

Explore more

Back to dashboard lfprojects CVEs valkey vulnerabilities

What researchers are saying

CVE-2026-27623

CRAC Learning - Tech@cracbotGeneral

CVE-2026-27623 was analyzed and its CVSS score noted, but the post lacks PoC, exploit code, active exploitation claims, patch information, or detailed technical vulnerability descriptions.

CRAC Learning - Tech@cracbotGeneral

High severity CVE-2026-27623 affecting Valkey 9.0.0–9.0.3 is reported, but no PoC, exploit, patch, or active exploitation details are provided.

CVE@CVEnewGeneral

The statement notes CVE‑2026‑27623 affects Valkey versions 9.0.0‑9.0.3, but offers no further technical or operational details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A Denial of Service vulnerability (CVE-2026-27623) affecting Valkey versions 9.0.0 through 9.0.2 has been disclosed, with no PoC, exploit, or patch details provided.