CVE-2026-23479

This repository provides a proof-of-concept exploit for CVE-2026-23479, a use-after-free (UAF) vulnerability in Redis's `unblockClientOnKey()` function. The exploit demonstrates the UAF by triggering a crash via GDB-assisted `freeClient()` calls and achieves remote code execution (RCE) by injecting `system()` calls at the vulnerable code path.

This repository contains a Python-based scanner for detecting CVE-2026-23479, a Redis Use-After-Free vulnerability. It checks for affected versions, authentication status, ACL permissions, exposure risks, and mitigations without exploiting the vulnerability.

The repository claims to exploit CVE-2026-23479, a use-after-free vulnerability in Redis, but provides no actual exploit code. Instead, it directs users to an external download link (tinyurl.com), which is a common tactic for distributing malware or fake exploits.

The repository claims to provide an exploit for CVE-2026-23479 (a use-after-free in Redis leading to RCE) but contains no actual exploit code. Instead, it directs users to download the exploit from an external URL (tinyurl.com), which is a common tactic for distributing malware or fake exploits.

This repository contains a safe, read-only version checker for CVE-2026-23479, a use-after-free vulnerability in Redis's blocking-client code. The tool connects to a Redis instance, optionally authenticates, and checks the version against a list of fixed releases to determine vulnerability status. It does not exploit the vulnerability.