## 8.6.6

- 種別: release
- 関連技術: redis
- CVE: CVE-2026-62356
- 公開日時: 2026-08-17T16:39:37.000Z
- 情報源: Redis Releases (https://github.com/redis/redis/releases/tag/8.6.6)
- パーマリンク: https://vulnpulse.app/items/redis-643dfac1eec3

Update urgency: SECURITY : There are security fixes in the release. Security fixes (CVE-2026-62356) Miscalculated buffer size in CMSketch RDB loading may lead to heap OOB write Out-of-bounds access in TopK heap cleanup path (MOD-15410) Use-after-free in the TLS pending-data list when a command closes another pending connection #15478 ACL key permission bypass in SORT , GEORADIUS / GEORADIUSBYMEMBER and XREAD / XREADGROUP : the keys validated by ACL could differ from the keys the command actually accesses A malicious RDB payload with an out-of-range SLOT_INFO slot id causes memory corruption d…