Redis RESTORE Deserialization Vulnerability Summary (RCE / CVE-2026 Series)

Redis Security Vulnerability Summary Vulnerability Overview CVE-2026-62156: In , an incorrect buffer size calculation when loading large RDB files causes a Heap Overflow. CVE-2026-25251: A Type Confusion vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25252: A Null Pointer Dereference vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25253: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25254: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25255: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25256: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25257: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25258: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25259: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25260: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25261: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25262: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25263: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25264: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25265: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25266: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25267: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25268: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25269: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25270: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25271: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25272: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25273: An Out-of-Bounds Write vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25274: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25275: An Out-of-Bounds Read vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25276: A Heap Overflow vulnerability in the command when deserializing streaming consumer groups containing commands, potentially leading to Remote Code Execution (RCE). CVE-2026-25277: An Out-of-Bounds Write vulnerability in the command when deserializin

Goal Reached Thanks to every supporter — we hit 100%!

Redis RESTORE Deserialization Vulnerability Summary (RCE / CVE-2026 Series)

More from this source