SecurityOnlineDo Son
CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed
Part of the CVE-2026-66373 story · since 30 Jul
- Thu 30 Jul, 08:21 UTC. SecurityOnline, first report. CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed. This article, 1st of 1.
A critical vulnerability has been identified in Redis, known as CVE-2026-66373, which involves a Remote Code Execution (RCE) risk stemming from a double-free bug in the RESTORE command. This flaw allows an authenticated attacker to potentially corrupt memory and execute arbitrary code within the Redis server process. The vulnerability has a CVSS score of 7.5 and affects all Redis versions prior to 8.8.0.
There are currently no confirmed instances of exploitation in the wild, and the issue has been patched in Redis version 8.8.0. Users are strongly advised to update to this version immediately to safeguard their systems.
How the story developed
1 article from 1 outlet since 30 Jul. Quiet since 30 Jul. This was the first report.
- Thu 30 Jul, 08:21 UTC. SecurityOnline, first report. CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed. This article, 1st of 1.
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 1 articles as a listHide the list
- Thu 30 JulDay 01
- CVE-2026-66373: Redis RCE Proof-of-Concept Publicly Disclosed08:21 · SecurityOnline · First report · This article, 1st of 1