early signals ZDI published infra

ZDI-26-833: Valkey clusterCreatePublishMsgBlock Numeric Truncation Error Remote Code Execution Vulnerability

// AI summary

Valkey has a ZDI-26-833 numeric truncation error in clusterCreatePublishMsgBlock allowing authenticated remote attackers to execute arbitrary code with a CVSS rating of 8.8.

// from the source

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Valkey. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8.
Read at zerodayinitiative.com ↗ More from ZDI published

# more from ZDI published

  1. ZDI published infra

    ZDI-26-839: MLflow PickleEvaluationArtifact Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com
  2. ZDI published infra

    ZDI-26-840: MLflow Tracking Server Jobs Missing Authorization Information Disclosure Vulnerability

    zerodayinitiative.com
  3. ZDI published infra

    ZDI-26-841: MLflow Tracking Server Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  4. ZDI published infra

    ZDI-26-842: MLflow Tracking Server Issues Missing Authorization Privilege Escalation Vulnerability

    zerodayinitiative.com
  5. ZDI published infra

    ZDI-26-843: MLflow SHAP load_explainer Deserialization of Untrusted Data Remote Code Execution Vulnerability

    zerodayinitiative.com