本文為英文版的機器翻譯版本，如內容有任何歧義或不一致之處，概以英文版為準。 # 常見漏洞與暴露 (CVE)：ElastiCache 中解決的安全漏洞 Common Vulnerabilities and Exposures (CVE) 指的是已知網路安全漏洞項目清單。每個項目都是包含識別號碼、描述和至少一個公有參考的連結。您可以在此頁面中找到 ElastiCache 中已解決的安全漏洞清單，以及不會影響 ElastiCache CVEs。 我們建議您一律升級至最新的 ElastiCache Valkey、Redis OSS 或 ElastiCache Memcached 版本，以防止已知的漏洞。操作 ElastiCache Serverless 快取時，CVE 修正會自動套用至您的快取。使用 Valkey 或 Redis OSS 操作節點型叢集時，ElastiCache 會公開 PATCH 元件。例如，使用 ElastiCache for Redis OSS 6.2.6 版時，主要版本為 6，次要版本為 2，修補程式版本為 6。PATCH 版本適用於回溯相容的錯誤修正、安全性修正和非功能變更。 ## Amazon ElastiCache 中處理的 CVEs 下表列出 CVEs及其處理的 ElastiCache 引擎版本。核取記號 (✓) 表示該版本中已解決 CVE。N/A 表示 CVE 不會影響該引擎版本。如果您的 ElastiCache Valkey 或 Redis OSS 叢集執行的版本沒有安全性修正，您可以升級至包含修正的較新 ElastiCache Valkey 或 Redis OSS 版本，或者如果您使用的版本包含修正，請參閱 來確保您已套用最新的服務更新[管理節點型叢集的服務更新](Self-Service-Updates.md#managing-updates)。如需支援的 ElastiCache 引擎版本以及如何升級的詳細資訊，請參閱 [ElastiCache 中的引擎版本和升級](engine-versions.md)。 **注意** 下表中的星號 (\*) 表示您必須為執行指定版本 的叢集套用最新的服務更新，才能解決安全性漏洞。如需如何驗證您已為叢集執行的版本套用最新服務更新的詳細資訊，請參閱 [管理節點型叢集的服務更新](Self-Service-Updates.md#managing-updates)。 | CVE | Valkey 9.1 | Valkey 9.0 | Valkey 8.2 | Valkey 8.1 | Valkey 8.0 | Valkey 7.2 | Redis OSS 7.1 | Redis OSS 7.0 | Redis OSS 6.2 | Redis OSS 6.0 | Redis OSS 5.0 | Redis OSS 4.0 | | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | | [CVE-2026-66373](https://www.cve.org/CVERecord?id=CVE-2026-66373)\* | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | | [CVE-2026-25589](https://www.cve.org/CVERecord?id=CVE-2026-25589) | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | | [CVE-2026-25588](https://www.cve.org/CVERecord?id=CVE-2026-25588) | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | | [CVE-2026-25243](https://www.cve.org/CVERecord?id=CVE-2026-25243)\* | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | | [CVE-2026-23631](https://www.cve.org/CVERecord?id=CVE-2026-23631) | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | | [CVE-2026-23479](https://www.cve.org/CVERecord?id=CVE-2026-23479)\* | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | | [CVE-2025-67733](https://www.cve.org/CVERecord?id=CVE-2025-67733)\* | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | N/A | | [CVE-2025-49844](https://www.cve.org/CVERecord?id=CVE-2025-49844)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-49819](https://www.cve.org/CVERecord?id=CVE-2025-49819)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-48367](https://www.cve.org/CVERecord?id=CVE-2025-48367)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-46844](https://www.cve.org/CVERecord?id=CVE-2025-46844)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-46818](https://www.cve.org/CVERecord?id=CVE-2025-46818)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-46817](https://www.cve.org/CVERecord?id=CVE-2025-46817)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-32023](https://www.cve.org/CVERecord?id=CVE-2025-32023)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2025-27151](https://www.cve.org/CVERecord?id=CVE-2025-27151)\* | N/A | N/A | N/A | ✓ | N/A | N/A | N/A | N/A | N/A | N/A | N/A | N/A | | [CVE-2025-21605](https://www.cve.org/CVERecord?id=CVE-2025-21605)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2024-46981](https://www.cve.org/CVERecord?id=CVE-2024-46981) | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2024-31449](https://www.cve.org/CVERecord?id=CVE-2024-31449)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2024-31228](https://www.cve.org/CVERecord?id=CVE-2024-31228)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2024-31227](https://www.cve.org/CVERecord?id=CVE-2024-31227)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2023-41056](https://www.cve.org/CVERecord?id=CVE-2023-41056)\* | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | N/A | N/A | N/A | N/A | N/A | | [CVE-2023-28425](https://www.cve.org/CVERecord?id=CVE-2023-28425)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | N/A | N/A | N/A | N/A | | [CVE-2023-25155](https://www.cve.org/CVERecord?id=CVE-2023-25155) | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2023-22458](https://www.cve.org/CVERecord?id=CVE-2023-22458) | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2022-36021](https://www.cve.org/CVERecord?id=CVE-2022-36021)\* | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2022-35977](https://www.cve.org/CVERecord?id=CVE-2022-35977)\* | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2022-35951](https://www.cve.org/CVERecord?id=CVE-2022-35951)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | N/A | N/A | N/A | N/A | | [CVE-2022-31144](https://www.cve.org/CVERecord?id=CVE-2022-31144)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | N/A | N/A | N/A | N/A | | [CVE-2022-24834](https://www.cve.org/CVERecord?id=CVE-2022-24834)\* | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | | [CVE-2021-41099](https://www.cve.org/CVERecord?id=CVE-2021-41099)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32762](https://www.cve.org/CVERecord?id=CVE-2021-32762)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32761](https://www.cve.org/CVERecord?id=CVE-2021-32761)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32687](https://www.cve.org/CVERecord?id=CVE-2021-32687)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32675](https://www.cve.org/CVERecord?id=CVE-2021-32675)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32672](https://www.cve.org/CVERecord?id=CVE-2021-32672)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32628](https://www.cve.org/CVERecord?id=CVE-2021-32628)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32627](https://www.cve.org/CVERecord?id=CVE-2021-32627)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32626](https://www.cve.org/CVERecord?id=CVE-2021-32626)\* | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-32625](https://www.cve.org/CVERecord?id=CVE-2021-32625)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-29478](https://www.cve.org/CVERecord?id=CVE-2021-29478)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-29477](https://www.cve.org/CVERecord?id=CVE-2021-29477)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | N/A | N/A | | [CVE-2021-21309](https://www.cve.org/CVERecord?id=CVE-2021-21309)\* | N/A | N/A | N/A | N/A | N/A | N/A | ✓ | ✓ | ✓ | ✓ | N/A | N/A | ## 不會影響 Amazon ElastiCache CVEs 下列 CVEs不會影響 Amazon ElastiCache for Valkey 或 Redis OSS。 + [CVE-2026-21864](https://www.cve.org/CVERecord?id=CVE-2026-21864) + [CVE-2026-21863](https://www.cve.org/CVERecord?id=CVE-2026-21863) + [CVE-2024-51741](https://www.cve.org/CVERecord?id=CVE-2024-51741) + [CVE-2023-45145](https://www.cve.org/CVERecord?id=CVE-2023-45145) + [CVE-2023-28856](https://www.cve.org/CVERecord?id=CVE-2023-28856) + [CVE-2022-24736](https://www.cve.org/CVERecord?id=CVE-2022-24736) + [CVE-2022-24735](https://www.cve.org/CVERecord?id=CVE-2022-24735)