{"apiVersion":"1.0","identifier":"CVE-2026-56684","description":"Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey-s tlsProcessPendingData function iterates pending_list while an authenticated client can trigger CLIENT KILL, causing connTLSClose to delete the iterator-s cached next node and producing a use-after-free that can crash the server or potentially allow remote code execution when TLS is enabled. This issue is fixed in versions 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1.","publishedAt":"2026-08-18T15:16:55","lastModifiedAt":"2026-08-19T04:17:24","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-56684","cvssScore":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00523,"riskScore":0.79,"affectedProduct":"Valkey","affectedVersions":"<7.2.14, <8.0.10, <8.1.9, <9.0.5, <9.1.1","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-56684","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-56684","en":"https://www.redsauce.net/en/cves/CVE-2026-56684","fr":"https://www.redsauce.net/fr/cves/CVE-2026-56684","pt":"https://www.redsauce.net/pt/cves/CVE-2026-56684","de":"https://www.redsauce.net/de/cves/CVE-2026-56684","sk":"https://www.redsauce.net/sk/cves/CVE-2026-56684","el":"https://www.redsauce.net/el/cves/CVE-2026-56684"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-56684"}}