CVE detail
CVE-2025-67733
Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user can use scripting commands to inject arbitrary information into the response stream for the given client, potentially corrupting or returning tampered data to other users on the same connection. The error handling code for lua scripts does not properly handle null characters. Versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12 fix the issue.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 13.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-67733.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comFeb 23, 2026, 8:28 PM - https://bugzilla.redhat.com/show_bug.cgi?id=2442025bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comFeb 23, 2026, 8:28 PM - https://access.redhat.com/security/cve/CVE-2025-67733access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 23, 2026, 8:28 PM - https://access.redhat.com/errata/RHSA-2026:5445access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 23, 2026, 8:28 PM - https://access.redhat.com/errata/RHSA-2026:3507access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 23, 2026, 8:28 PM - https://access.redhat.com/errata/RHSA-2026:3443access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comFeb 23, 2026, 8:28 PM No excerpt available.
Exploitgithub.comFeb 23, 2026, 8:28 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2019-11045CVSS 3.7 · Low
In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte.…
- CVE-2026-18085CVSS 5.9 · Medium
An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
- CVE-2026-16765CVSS 5.5 · Medium
A vulnerability was determined in CodeAstro Online Classroom 1.0. Affected by this issue is some unknown functionality of the file /OnlineClassroom/loginlinkadmin.php. Executing a…
- CVE-2026-16490CVSS 2.1 · Low
A security flaw has been discovered in itsourcecode Hospital Management System 1.0. Impacted is an unknown function of the file /prescription.php. The manipulation of the argument…
- CVE-2026-16484CVSS 5.5 · Medium
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /edit_subjecta.php. This mani…
- CVE-2026-16449CVSS 2.1 · Low
A vulnerability was determined in zsadmin2025 ZS-Admin up to b52e14536d59fda11e56e2536a1c32e82a38cead. The impacted element is the function OrderItem.asc/OrderItem.desc of the fil…