{"vulnerability": "CVE-2026-84372", "sightings": [{"uuid": "2887f836-f29c-4a8e-a0c5-ea446fd4bd07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3muifb2ywsm2v", "content": "\u26a0\ufe0f PATCH NOW\n\nPredis, a widely used PHP client for Redis, has a critical flaw (CVSS 9.8, CVE-2026-84372): attacker-controlled cache keys can smuggle extra Redis commands.\n\nHits versions 3.0 to 3.2 on cluster and replication setups.\n\nFix: upgrade to Predis 3.3.0.", "creation_timestamp": "2026-09-01T21:43:11.602921Z"}, {"uuid": "56442386-1f57-43d8-a543-13c838995e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3muijmrq6t52e", "content": "\ud83d\udd34 CVE-2026-84372 - Critical (9.8)\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84372/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-01T23:01:19.706013Z"}, {"uuid": "ad044c51-f7d1-4a00-be8b-815fb8396c7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3muinddr47n2o", "content": "\ud83d\udea8 CVE-2026-84372 \u2014 CVSS 9.8 CRITICAL\n\nPredis is a flexible and feature-complete Redis and Valkey client for PHP. From version 3.0.0-RC1 until ver...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84372\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-02T00:07:37.616575Z"}, {"uuid": "508cb2f2-596f-44da-89b7-6ab32c2b059d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3muk2q5qiyj2g", "content": "CVE-2026-84372 - predis\nThe PHP library Predis, used to talk to Redis databases, mishandles batched commands in certain versions. An attacker who can supply specially crafted data could make the client execute\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#predis #CVE #infosec", "creation_timestamp": "2026-09-02T13:40:05.268788Z"}, {"uuid": "86392008-14a6-45b6-93a7-81622012775b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-84372", "type": "published-proof-of-concept", "source": "https://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786", "content": "", "creation_timestamp": "2026-09-08T22:35:39.908701Z"}, {"uuid": "bf856a25-8958-4294-9ebf-ab4537e0085d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mv2irus2hv2l", "content": "Details and PoC for CVE-2026-84372 are publicly disclosed. This Predis command injection flaw via CRLF smuggling allows complete cluster compromise.\n\n#Predis #CommandInjection #CVE202684372 #Cybersecurity #Vulnerability", "creation_timestamp": "2026-09-09T02:34:12.839757Z"}, {"uuid": "9c2d2b4f-5292-4f65-9fcc-925ca4aebd84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "seen", "source": "https://t.me/bdufstecru/3436", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 AbstractAggregateConnection::write() PHP-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 Redis \u0438 Valkey Predis \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-14128\nCVE-2026-84372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786\nhttps://github.com/predis/predis/commit/053cb4b6ac7fb1f469ead96a78d059bc0458e408", "creation_timestamp": "2026-09-15T15:00:05.980226Z"}, {"uuid": "a29bf0c2-e856-4ac2-b734-17ba32ebb36c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84372", "type": "published-proof-of-concept", "source": "https://t.me/bdufstecru/3436", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0442\u043e\u0434\u0430 AbstractAggregateConnection::write() PHP-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0431\u0430\u0437 \u0434\u0430\u043d\u043d\u044b\u0445 Redis \u0438 Valkey Predis \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u0438\u0435\u043c \u043c\u0435\u0440 \u043f\u043e \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0435\u0439 CRLF. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\n\nBDU:2026-14128\nCVE-2026-84372\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://github.com/predis/predis/security/advisories/GHSA-w6f5-v2h6-g786\nhttps://github.com/predis/predis/commit/053cb4b6ac7fb1f469ead96a78d059bc0458e408", "creation_timestamp": "2026-09-16T00:00:29.529957Z"}]}