Redis security advisory (AV26-423) - Update 1
Brief
Serial number: AV26-423 Date: May 5, 2026 Updated: October 19, 2026
On May 5, 2026, Redis published a security advisory to address vulnerabilities in the following products:
- Redis Software – multiple versions
- Redis OSS/CE releases – multiple versions
Update 1
Open-source reporting indicates that CVE-2026-25243 is being exploited in the wild.
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
- Redis Security advisory: [CVE‑2026‑23479] [CVE‑2026‑25243] [CVE-2026-25588] [CVE‑2026‑25589] [CVE-2026-23631]
- Redis Security Advisories
Redis security advisory (AV26-423) - Update 1 - Canadian Centre for Cyber Security