Security Advisory: CVE-2026-81934 | Redis

This post details Redis's response to the CVE-2026-81934 vulnerability, a use-after-free flaw in TLS pending-data processing. It outlines the remediation efforts, including expedited fixes for Redis Open Source and Redis Software, and patching of Redis Cloud Essentials. Remediation for Redis Cloud Pro is underway. The post also reiterates best practices for securing Redis instances, such as strong authentication, ACLs, and restricting network access. Redis's assessment of the severity is High, with a CVSS v4.0 score of 7.5.