CVE-2025-26268

Medium

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The…

mitre·CWE-392·Published 2025-04-17

CVSS

6.5

EPSS

0.00

KEV

Exploits

cve.orgen

184 chars

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

NVDen

184 chars

DragonflyDB Dragonfly before 1.27.0 allows authenticated users to cause a denial of service (daemon crash) via a crafted Redis command. The validity of the scan cursor was not checked.

DragonflyDB Dragonfly anterior a la versión 1.27.0 permite a los usuarios autenticados provocar una denegación de servicio (fallo del daemon) mediante un comando Redis manipulado específicamente. No se comprobó la validez del cursor de escaneo.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
3.1	Primary	cve.org	3.3	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
3.1	Primary	cve.org	3.3	—	—	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
3.1	Secondary	NVD	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L