CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

[NEW] [UNPATCHED] [medium] Redis: Vulnerability enables Denial of Service and Information Disclosure

mediumCVE-2026-72568
An attacker from an adjacent network can exploit a vulnerability in Redis to perform a Denial of Service attack and disclose information.

CSIRTS triage

What
An adjacent network attacker can exploit a vulnerability to perform denial of service and disclose information.
Who is affected
Redis deployments accessible from adjacent networks.
Urgency
Medium severity; unpatched and exploitability unknown, but dos and information disclosure impact warrant timely review.
Action
Monitor Redis security advisories for patch availability and apply when released; restrict network access if feasible.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Redis

Get an email when a new Redis advisory drops — max one per day, one-click unsubscribe.

Details

Source
CERT-Bund (BSI) Security Advisories (DE · national-cert · site)
Severity
medium
Published
2026-08-11
Exploitation
Not in CISA KEV at last sync
Language
Machine-translated to English — verify against the original

Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2745

Referenced CVEs

CVECSIRTS overviewExternal
CVE-2026-72568coverage & exploitation statusNVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

More from CERT-Bund (BSI) Security Advisories