CVE-2026-92925

Name of the Vulnerable Software and Affected Versions Redis community (affected versions not specified)

Description The cluster bus packet parser, which handles PING, PONG, and MEET packets, does not properly validate string-carrying extensions for null-termination. This allows a remote attacker to send a malicious packet that triggers an out-of-bounds read during payload processing, potentially leading to sensitive information disclosure or a remote denial of service (DoS).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.