Redis security advisory (AV26-423) - Update 1

Serial number: AV26-423
Date: May 5, 2026
Updated: October 19, 2026

On May 5, 2026, Redis published a security advisory to address vulnerabilities in the following products:

• Redis Software – multiple versions
• Redis OSS/CE releases – multiple versions

Update 1

Open-source reporting indicates that CVE-2026-25243 is being exploited in the wild.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Redis Security advisory: [CVE‑2026‑23479] [CVE‑2026‑25243] [CVE-2026-25588] [CVE‑2026‑25589] [CVE-2026-23631]
• Redis Security Advisories