{"vulnerability": "CVE-2026-84372", "sightings": [{"uuid": "2887f836-f29c-4a8e-a0c5-ea446fd4bd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v", "content": "\u26a0\ufe0f PATCH NOW\n\nPredis, a widely used PHP client for Redis, has a critical flaw (CVSS 9.8, CVE-2026-84372): attacker-controlled cache keys can smuggle extra Redis commands.\n\nHits versions 3.0 to 3.2 on cluster and replication setups.\n\nFix: upgrade to Predis 3.3.0.", "creation_timestamp": "2026-09-01T21:43:11.602921Z"}, {"uuid": "56442386-1f57-43d8-a543-13c838995e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e", "content": "\ud83d\udd34 CVE-2026-84372 - Critical (9.8)\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:01:19.706013Z"}, {"uuid": "ad044c51-f7d1-4a00-be8b-815fb8396c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muinddr47n2o", "content": "\ud83d\udea8 CVE-2026-84372 \u2014 CVSS 9.8 CRITICAL\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84372\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T00:07:37.616575Z"}, {"uuid": "508cb2f2-596f-44da-89b7-6ab32c2b059d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muk2q5qiyj2g", "content": "CVE-2026-84372 - predis\nThe PHP library Predis, used to talk to Redis databases, mishandles batched commands in certain versions. An attacker who can supply specially crafted data could make the client execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#predis #CVE #infosec", "creation_timestamp": "2026-09-02T13:40:05.268788Z"}]}