{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "Redis ist ein In-Memory-Datenstrukturspeicher, der als Datenbank, Cache und Message Broker verwendet wird.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein Angreifer kann mehrere Schwachstellen in Redis ausnutzen, um Sicherheitsvorkehrungen zu umgehen, sich als andere Benutzer auszugeben, Daten zu manipulieren, vertrauliche Informationen offenzulegen, den Speicher zu beschädigen, möglicherweise beliebigen Code auszuführen und Denial-of-Service-Zustände herbeizuführen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Sonstiges\n- UNIX",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-2869 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2869.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-2869 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-2869"
    }, {
      "category" : "external",
      "summary" : "Redis Release 8.10.1 vom 2026-08-17",
      "url" : "https://github.com/redis/redis/releases/tag/8.10.1"
    }, {
      "category" : "external",
      "summary" : "Redis Release 8.2.9 vom 2026-08-17",
      "url" : "https://github.com/redis/redis/releases/tag/8.2.9"
    }, {
      "category" : "external",
      "summary" : "Redis Release 8.4.6 vom 2026-08-17",
      "url" : "https://github.com/redis/redis/releases/tag/8.4.6"
    }, {
      "category" : "external",
      "summary" : "Redis Release 8.6.6 vom 2026-08-17",
      "url" : "https://github.com/redis/redis/releases/tag/8.6.6"
    }, {
      "category" : "external",
      "summary" : "Redis Release 8.8.2 vom 2026-08-17",
      "url" : "https://github.com/redis/redis/releases/tag/8.8.2"
    }, {
      "category" : "external",
      "summary" : "openSUSE Security Update OPENSUSE-SU-2026:11542-1 vom 2026-08-21",
      "url" : "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LJCOCIGFJRTGSL7B6LBQA4CBTCFCTL75/"
    } ],
    "source_lang" : "en-US",
    "title" : "Redis: Mehrere Schwachstellen",
    "tracking" : {
      "current_release_date" : "2026-08-23T22:00:00.000+00:00",
      "generator" : {
        "date" : "2026-08-24T08:58:06.570+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.6.0"
        }
      },
      "id" : "WID-SEC-W-2026-2869",
      "initial_release_date" : "2026-08-17T22:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-08-17T22:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      }, {
        "date" : "2026-08-23T22:00:00.000+00:00",
        "number" : "2",
        "summary" : "Neue Updates von openSUSE aufgenommen"
      } ],
      "status" : "final",
      "version" : "2"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<8.10.1",
          "product" : {
            "name" : "Open Source Redis <8.10.1",
            "product_id" : "T058194"
          }
        }, {
          "category" : "product_version",
          "name" : "8.10.1",
          "product" : {
            "name" : "Open Source Redis 8.10.1",
            "product_id" : "T058194-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redislabs:redis:8.10.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<8.2.9",
          "product" : {
            "name" : "Open Source Redis <8.2.9",
            "product_id" : "T058195"
          }
        }, {
          "category" : "product_version",
          "name" : "8.2.9",
          "product" : {
            "name" : "Open Source Redis 8.2.9",
            "product_id" : "T058195-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redislabs:redis:8.2.9"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<8.4.6",
          "product" : {
            "name" : "Open Source Redis <8.4.6",
            "product_id" : "T058196"
          }
        }, {
          "category" : "product_version",
          "name" : "8.4.6",
          "product" : {
            "name" : "Open Source Redis 8.4.6",
            "product_id" : "T058196-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redislabs:redis:8.4.6"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<8.6.6",
          "product" : {
            "name" : "Open Source Redis <8.6.6",
            "product_id" : "T058197"
          }
        }, {
          "category" : "product_version",
          "name" : "8.6.6",
          "product" : {
            "name" : "Open Source Redis 8.6.6",
            "product_id" : "T058197-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redislabs:redis:8.6.6"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<8.8.2",
          "product" : {
            "name" : "Open Source Redis <8.8.2",
            "product_id" : "T058198"
          }
        }, {
          "category" : "product_version",
          "name" : "8.8.2",
          "product" : {
            "name" : "Open Source Redis 8.8.2",
            "product_id" : "T058198-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:redislabs:redis:8.8.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "Redis"
      } ],
      "category" : "vendor",
      "name" : "Open Source"
    }, {
      "branches" : [ {
        "category" : "product_name",
        "name" : "SUSE openSUSE",
        "product" : {
          "name" : "SUSE openSUSE",
          "product_id" : "T055946",
          "product_identification_helper" : {
            "cpe" : "cpe:/o:suse:opensuse:-"
          }
        }
      } ],
      "category" : "vendor",
      "name" : "SUSE"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-62356",
    "product_status" : {
      "known_affected" : [ "T058194", "T058196", "T058195", "T055946", "T058198", "T058197" ]
    },
    "release_date" : "2026-08-17T22:00:00.000+00:00",
    "title" : "CVE-2026-62356"
  } ]
}