CVE-2026-85219

17th percentile - higher than 17% of all known CVEs

Denial-of-Service in Redis module in Thinkst Canary's OpenCanary 0.9.9 allows an unauthenticated remote attacker cause unconstrained memory usage.

An attacker can exhaust server memory, leading to denial of service and system unavailability. This can disrupt the operation of honeypots and security monitoring.

Update OpenCanary to a version containing the fix or restrict access to the Redis module to trusted networks only. Monitor memory usage to detect attack attempts.