Low severity2.4NVD Advisory· Published Aug 31, 2026

CVE-2026-82677

Description

A vulnerability was determined in valkey-io valkey 9.1.0. Impacted is the function moduleTimerHandler of the file src/module.c of the component Module Timer Subsystem. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: b349fe2821e3998534b1454c1b64a478daf8c6b7. To fix this issue, it is recommended to deploy a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Valkey Io/Valkeyllm-fuzzy
Range: =9.1.0

Patches

Vulnerability mechanics

References

github.com/valkey-io/valkey/commit/b349fe2821e3998534b1454c1b64a478daf8c6b7nvd
github.com/valkey-io/valkey/issues/4200nvd
github.com/valkey-io/valkey/pull/4211nvd
vuldb.com/cve/CVE-2026-82677nvd
vuldb.com/submit/893959nvd
vuldb.com/vuln/397172nvd
vuldb.com/vuln/397172/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000