Redis security advisory (AV26-423) - Update 1

Imported from official source

Cybersecurity Classified by Officially

Serial number: AV26-423
Date: May 5, 2026
Updated: October 19, 2026

On May 5, 2026, Redis published a security advisory to address vulnerabilities in the following products:

  • Redis Software – multiple versions
  • Redis OSS/CE releases – multiple versions

Update 1

Open-source reporting indicates that CVE-2026-25243 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

This is an extract. The publication continues at the source.

Source: Canadian Centre for Cyber Security. Licence

Read the original at the source: https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423

Officially imported this from Canadian Centre for Cyber Security’s own source and shows an extract. If you work there, claiming the profile and verifying the domain lets you choose to show the full text here.

Provenance

Organization
Canadian Centre for Cyber Security — imported from official source
Official source
https://www.cyber.gc.ca/api/cccs/rss/v1/get?feed=alerts_advisories&lang=en ATOM
Imported
October 19, 2026 14:00
Versions
1 recorded
Identity
https://cyber.gc.ca/en/alerts-advisories/redis-security-advisory-av26-423

Officially records where a publication came from, not whether it is true. Imported records are reproduced from an organization's own official source.