Redis · week of 26 Oct 2026
Redis security note
Records on this stack that changed between 26 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.
What changed
No changed record includes a version a customer can check.
What we still do not know
CVE-2026-81212 — Check if you run it
IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key.
No version range is stored, so an installed version cannot be checked.
CVE-2026-92925 — Check if you run it
A flaw was found in Redis community.
No version range is stored, so an installed version cannot be checked.
Share this note
Redis security note, week of 26 Oct 2026: 0 records have a version a customer can check, and 2 still do not. https://zerodayfindings.com/technologies/redis/notes/2026-W44