CVE-2026-92925
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 17, 2026
Vendor
unknown
Description
In Redis community the cluster bus PING/PONG/MEET packet parser validated extension padding and total length but never checked that string-carrying extensions are properly null-terminated, allowing a crafted packet to trigger out-of-bounds reads when the payload is later consumed as a C string. This vulnerability can potentially lead to loss of confidentiality or remote denial of service. Redis Software / Redis Enterprise are not affected by this issue.