The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:21936 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11473:05 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11019:01 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11535:02 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)
      * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)
      * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)
      * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Redis installed on the remote host is prior to 6.2.20, 7.0.x prior to 7.2.11, 7.4.x prior to 7.4.6, 8.0.x prior to 8.0.4, or 8.2.x prior to 8.2.2. It is, therefore, affected by a vulnerability as referenced in the security advisory.

  - A use-after-free vulnerability in the Lua scripting engine. An authenticated user can use a specially     crafted Lua script to manipulate the garbage collector, trigger a use-after-free, and potentially achieve     remote code execution. (CVE-2025-49844)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_21916 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)

    * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)

    * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)

    * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2025_19675 advisory.

    * redis: Lua library commands may lead to integer overflow and potential RCE (CVE-2025-46817)

    * Redis: Redis: Authenticated users can execute LUA scripts as a different user (CVE-2025-46818)

    * Redis: Redis is vulnerable to DoS via specially crafted LUA scripts (CVE-2025-46819)

    * Redis: Redis Lua Use-After-Free may lead to remote code execution (CVE-2025-49844)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 24.04 LTS / 25.04 / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7893-1 advisory.

    Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Valkey incorrectly handled memory when running     Lua scripts. An authenticated attacker could use this vulnerability to trigger a use-after-free condition,     and potentially achieve remote code execution on the Valkey server. (CVE-2025-49844)

    It was discovered that Valkey incorrectly handled memory when running Lua scripts. An authenticated     attacker could use this vulnerability to trigger a integer overflow condition, and potentially achieve     remote code execution on the Valkey server. (CVE-2025-46817)

    It was discovered that Valkey incorrectly handled Lua objects. An authenticated attacker could possibly     use this issue to escalate their privileges. (CVE-2025-46818)

    It was discovered that Valkey incorrectly handled memory when running Lua scripts. An authenticated     attacker could use this vulnerability to read out-of-bounds memory, causing a denial of service or     possibly obtaining sensitive information. (CVE-2025-46819)

    It was discovered that Valkey incorrectly handled memory in some calculations. An attacker could possibly     use this issue to cause a denial of service. (CVE-2025-49112)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
277576	AlmaLinux 10 : valkey (ALSA-2025:21936)	Nessus	Alma Linux Local Security Checks	12/5/2025	12/5/2025	critical
282822	MiracleLinux 9 : redis-6.2.20-2.el9_7 (AXSA:2025-11473:05)	Nessus	Miracle Linux Local Security Checks	1/13/2026	2/16/2026	critical
283069	MiracleLinux 8 : redis:6 (AXSA:2025-11019:01)	Nessus	Miracle Linux Local Security Checks	1/13/2026	2/16/2026	critical
283192	MiracleLinux 9 : valkey-8.0.6-2.el9_7 (AXSA:2025-11535:02)	Nessus	Miracle Linux Local Security Checks	1/13/2026	2/13/2026	critical
339370	Redis < 6.2.20 / 7.0.x < 7.2.11 / 7.4.x < 7.4.6 / 8.0.x < 8.0.4 / 8.2.x < 8.2.2 RCE (RediShell)	Nessus	Misc.	8/25/2026	8/26/2026	critical
356151	Rocky Linux 9 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2025_21916)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/2/2026	critical
358511	Rocky Linux 10.0 [CIQ] Security Update: valkey / valkey-debuginfo / valkey-debugsource / valkey-devel Multiple Vulnerabilities (crlsa-2025_19675)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/2/2026	critical
277321	Ubuntu 24.04 LTS / 25.04 / 25.10 : Valkey vulnerabilities (USN-7893-1)	Nessus	Ubuntu Local Security Checks	12/3/2025	12/3/2025	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical