Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-85220— Denial-of-Service in the Thinkst Canary Redis service

Quick assessment

Affected
Thinkst Applied Research Canary
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Thinkst Canary 蜜罐中的 Redis 服务存在一个漏洞，允许未认证的远程攻击者对蜜罐发起拒绝服务（DoS）攻击。 该漏洞仅在启用 Redis 服务时才可利用。 如果 Redis 服务处于禁用状态，则 Canary 不受此漏洞影响。 Thinkst 已在所有受支持平台上修复了此问题。 除 Docker 平台外，所有平台均可获取用于修复此问题的新更新文件。对于 Docker 用户，官方已发布包含该补丁的新 Docker 镜像。已启用自动更新的用户，相关更新已在分发中。若自动更新功能被禁用，建议客户手动更新

CVSS 3.7 · Low EPSS 0.41% · P33

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 11

VendorProduct Version RangeStatus
Thinkst Applied Research Canary 5.1.2 unaffected
5.2.2 unaffected
5.3.2 unaffected
5.4.2 unaffected
5.5.2 unaffected
5.6.4 unaffected
5.7.2 unaffected
5.8.2 unaffected
… +3 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-85220

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Denial-of-Service in the Thinkst Canary Redis service
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Thinkst Canary honeypot Redis service allows an unauthenticated remote attacker to execute a Denial-of-Service attack against the honeypot. The vulnerability is accessible when the Redis service is enabled only. The Canary is NOT affected if the Redis service is disabled. Thinkst has addressed this issue on all supported platforms. New update files to address this issue are available on all platforms except Docker. For Docker customers, a new Docker image has been published which includes the patch. Customers with automatic updates enabled already have updates in distribution. If automatic updates are disabled, customers are advised to update their Canaries. Workarounds are available for customers unable to update at this time.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Thinkst Applied Research Canary - -

II. Public POCs for CVE-2026-85220

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-85220

请登录查看更多情报信息。

Other References for CVE-2026-85220 (1)

IV. Related Vulnerabilities

Same vendor: Thinkst Applied Research
Same weakness: CWE-770

V. Comments for CVE-2026-85220

No comments yet

Leave a comment