July 24, 2026
- Public Redis RCE PoCs shipped for CVE-2026-25243, a heap double-free/type confusion in the RDB loader via crafted
RESTOREpayloads (Redis 6.2.x–8.6.3), including a DEBUG-free variant with ASLR on and multi-version PoCs. PoC. · Vulnerabilities & Exploits