Vvalkey-io

Products

Exploited and recent CVEs

• CVE-2026-86227 Low 3.1 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds 0.5%
• CVE-2026-85522 Medium 5.3 valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds 0.9%
• CVE-2026-82677 Low 2.4 valkey-io valkey Module Timer module.c moduleTimerHandler double free 0.3%
• CVE-2026-82631 Low 2.2 valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free 0.4%
• CVE-2026-63639 High 8.8 Valkey: UAF in stream deserialization may lead to remote code execution 0.9%
• CVE-2026-56684 High 7.5 Valkey: TLS pending-data processing use-after-free may allow remote code execution 0.5%
• CVE-2026-21864 Medium 6.5 Remote DoS from malformed RESTORE command 0.3%
• CVE-2026-27623 High 7.5 Valkey has Pre-Authentication DOS from malformed RESP request 0.4%
• CVE-2026-21863 High 7.5 Malformed Valkey Cluster bus message can lead to Remote DoS 0.8%
• CVE-2025-67733 High 8.5 Valkey Affected by RESP Protocol Injection via Lua error_reply 0.6%