CVE-2026-72568 | Redis up to 8.8.1 Cluster Bus Message Parser getPingExtLength out-of-bounds

A vulnerability was found in Redis up to 8.8.1. It has been declared as critical. This affects the function getPingExtLength of the component Cluster Bus Message Parser. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is registered as CVE-2026-72568. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More