{"uuid": "eb4e4c50-d5d3-4fc3-a255-4320e8163d45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25243", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/34830", "content": "\ud83d\uddc4 Redis PoC (CVE-2026-25243 Bypass Variant)\nA research repository demonstrating a proof-of-concept (PoC) for a newly disclosed authenticated Remote Code Execution (RCE) vulnerability affecting specific Redis versions. The project analyzes a stream consumer-group shared NACK double-free condition and documents how it bypasses the previous mitigation for CVE-2026-25243.\n\n\ud83d\udccc GitHub\n\ud83d\udc49 https://github.com/berabuddies/redis-poc\n\n\u2728 Features\n\u2022 Research PoC for an authenticated Redis RCE vulnerability\n\u2022 Demonstrates a shared-NACK double-free vulnerability in Redis Streams\n\u2022 Covers Redis 6.2.22, 7.4.9, and 8.6.4\n\u2022 Includes version-specific PoC implementations\n\u2022 Shared helper libraries for payload construction and testing\n\u2022 CRC64 implementation required for Redis RESTORE payload generation\n\u2022 Offset calibration utility for analyzing non-standard Redis builds\n\u2022 Documentation for testing against official Redis Docker images\n\u2022 Notes on affected and patched Redis versions\n\u2022 Intended for vulnerability research and security validation in authorized environments\n\n\ud83d\udcbb Platform / Technologies\n\u2022 Python 3\n\u2022 C\n\u2022 GCC\n\u2022 Redis\n\u2022 Docker\n\u2022 Linux\n\n\ud83c\udfaf Ideal For\n* Vulnerability Researchers\n* Redis Security Engineers\n* Penetration Testers\n* Red Team Researchers\n* Incident Responders\n* Security Lab Environments\n\n\u26a0\ufe0f Note: This repository is intended for authorized security research and laboratory validation only. \nAccording to the project documentation, the PoC targets specific Redis versions, while Redis 8.8.0 and later are not affected due to architectural changes that eliminate the vulnerable condition.\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:14.242609Z"}