CVE-2026-111279 is a high-severity vulnerability in Dragonfly, a database software, that allows unauthenticated clients to cause an out-of-memory (OOM) condition by sending a specially crafted command with a negative COUNT value to certain commands (HRANDFIELD, ZRANDMEMBER, or SRANDMEMBER). This can lead to the termination of the instance for all clients. The vulnerability has a CVSS score of 8.7 and is c [truncated]
CVE-2026-62357 is a high-severity vulnerability in Dragonfly, an in-memory data store. The vulnerability allows an unauthenticated remote client to corrupt or disclose adjacent heap memory and crash the server. It is fixed in version 1.40.0. Defenders should assess exposure and prioritize patching to prevent potential memory corruption and server crashes. The vulnerability is caused by the CMS.INITBYDIM a [truncated]
