A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the packet's payload is processed. Successful exploitation of this vulnerability could result in the disclosure of sensitive information or a remote denial of service (DoS).

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3265 advisory.

    hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP     aggregate parser. (CVE-2026-88382)

    A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG,     and MEET packets, fails to properly validate string-carrying extensions for null-termination. This     oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the     packet's payload is processed. Successful exploitation of this vulnerability could result in the     disclosure of sensitive information or a remote denial of service (DoS). (CVE-2026-92925)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8866-1 advisory.

    It was discovered that Redis did not properly manage memory when handling the TLS pending-data list. A     remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-81934)

    It was discovered that Redis incorrectly handled certain inputs when processing cluster bus packets. A     remote attacker could possibly use this issue to expose sensitive information or cause a denial of     service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-92925)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:23986-1 advisory.

    This update for valkey fixes the following issue:

    - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the     cluster bus packet       parser can lead to an out-of-bounds read (bsc#1281417).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4493-1 advisory.

    This update for valkey fixes the following issue:

    - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the     cluster bus packet       parser can lead to an out-of-bounds read (bsc#1281417).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4491-1 advisory.

    This update for valkey fixes the following issue:

    - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the     cluster bus packet       parser can lead to an out-of-bounds read (bsc#1281417).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21985-1 advisory.

    This update for valkey fixes the following issue:

    - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the     cluster bus packet       parser can lead to an out-of-bounds read (bsc#1281417).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4375-1 advisory.

    This update for redis7 fixes the following issue:

    - CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the     cluster bus packet       parser can lead to an out-of-bounds read (bsc#1281417).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4794 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-4794-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     September 24, 2026                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : redis     Version        : 5:7.0.15-1~deb12u10     CVE ID         : CVE-2026-81934 CVE-2026-92925     Debian Bug     : 1147423 1148265

    It was discovered that there were two vulnerabilities in the Redis     key/value database.

    CVE-2026-81934

        CVE-2026-81934: Prevent a use-after-free vulnerability in the         handling of pending TLS data. A remote, unauthenticated attacker         may have been able to execute arbitrary commands with the         privileges of the Redis server.

    CVE-2026-92925

        Prevent an out-of-bounds vulnerability in the handling of cluster         ping extensions. This could have allowed a remote attacker to         craft a malicious packet, leading to an out-of-bounds read when         the packet's payload was processed.

    For Debian 12 bookworm, these problems have been fixed in version     5:7.0.15-1~deb12u10.

    We recommend that you upgrade your redis packages.

    For the detailed security status of redis please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/redis

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69520 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)

    * redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)

    * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

    * redis: Redis: Out-of-bounds read via crafted cluster bus packets (CVE-2026-92925)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:69521 advisory.

    Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can     contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data     set. You can persist it either by dumping the data set to disk every once in a while, or by appending each     command to a log.

    Security Fix(es):

    * redis: Redis: Remote Code Execution via specially crafted RESTORE payload (CVE-2026-66373)

    * redis: Redis: Denial of Service via Out-of-Bounds Read in Cluster Bus (CVE-2026-72568)

    * redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free (CVE-2026-81934)

    * redis: Redis: Out-of-bounds read via crafted cluster bus packets (CVE-2026-92925)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG,     and MEET packets, fails to properly validate string-carrying extensions for null-termination. This     oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds read when the     packet's payload is processed. Successful exploitation of this vulnerability could result in the     disclosure of sensitive information or a remote denial of service (DoS). (CVE-2026-92925)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
371839	Amazon Linux 2023 : valkey, valkey-devel (ALAS2023-2026-3265)	Nessus	Amazon Linux Local Security Checks	Local	medium
364283	Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : Redis vulnerabilities (USN-8866-1)	Nessus	Ubuntu Local Security Checks	Local	high
363091	SUSE SLES16 Security Update : valkey (SUSE-SU-2026:23986-1)	Nessus	SuSE Local Security Checks	Local	medium
363085	SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4493-1)	Nessus	SuSE Local Security Checks	Local	medium
363077	SUSE SLES15 Security Update : valkey (SUSE-SU-2026:4491-1)	Nessus	SuSE Local Security Checks	Local	medium
362532	openSUSE 16 Security Update : valkey (openSUSE-SU-2026:21985-1)	Nessus	SuSE Local Security Checks	Local	medium
350983	SUSE SLES15 Security Update : redis7 (SUSE-SU-2026:4375-1)	Nessus	SuSE Local Security Checks	Local	medium
349794	Debian dla-4794 : redis - security update	Nessus	Debian Local Security Checks	Local	high
348682	RHEL 9 : redis:7 (RHSA-2026:69520)	Nessus	Red Hat Local Security Checks	Local	high
348597	RHEL 9 : redis:7 (RHSA-2026:69521)	Nessus	Red Hat Local Security Checks	Local	high
347929	Linux Distros Unpatched Vulnerability : CVE-2026-92925	Nessus	Misc.	Local	high

Detections

Analytics

CVE-2026-92925

medium

Tenable Plugins

medium

high

medium

medium

medium

medium

medium

high

high

high

high