All · Redis

Newest first. Every filter here is also a feed: see the subscribe box.

1. 7.1high
   CVE-2026-81934Redis TLS pending-data list use-after-free

   Redis
   2 mo ago 2026-08-27
2. 7.5high
   CVE-2026-66373Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE pay…

   Redis
   3 mo ago 2026-07-25
3. 8.8high
   CVE-2026-25243redis-server RESTORE invalid memory access may allow remote code execution

   EPSS 4.0% chance of exploitation in 30 days, percentile 91%EPSS 4.0%Redis
   6 mo ago 2026-05-05
4. 8.8high
   CVE-2026-23631redis-server Lua use-after-free may allow remote code execution

   EPSS 3.1% chance of exploitation in 30 days, percentile 88%EPSS 3.1%Redis
   6 mo ago 2026-05-05
5. 7.5high
   CVE-2026-23479redis-server use-after-free in unblock client flow may allow remote code execution

   EPSS 2.6% chance of exploitation in 30 days, percentile 85%EPSS 2.6%Redis
   6 mo ago 2026-05-05
6. 8.8high
   CVE-2025-62507Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

   EPSS 7.5% chance of exploitation in 30 days, percentile 94%EPSS 7.5%Redis
   12 mo ago 2025-11-04
7. 10.0crit
   CVE-2025-49844Redis Lua Use-After-Free may lead to remote code execution

   EPSS 82.6% chance of exploitation in 30 days, percentile 100%EPSS 82.6%Redis
   13 mo ago 2025-10-03
8. 6.3med
   CVE-2025-46819Redis is vulnerable to DoS via specially crafted LUA scripts

   EPSS 1.1% chance of exploitation in 30 days, percentile 65%EPSS 1.1%Redis
   13 mo ago 2025-10-03
9. 6.0med
   CVE-2025-46818Redis: Authenticated users can execute LUA scripts as a different user

   Redis
   13 mo ago 2025-10-03
10. 7.0high
    CVE-2025-46817Lua library commands may lead to integer overflow and potential RCE

    EPSS 3.9% chance of exploitation in 30 days, percentile 90%EPSS 3.9%Redis
    13 mo ago 2025-10-03
11. 3.5low
    CVE-2025-46686Redis through 8.0.3 allows memory consumption via a multi-bulk command composed of many bulks, sent by an authenticated user.

    Redis
    15 mo ago 2025-07-23
12. 7.5high
    CVE-2025-48367Redis DoS Vulnerability due to bad connection error handling

    EPSS 1.2% chance of exploitation in 30 days, percentile 68%EPSS 1.2%Redis
    16 mo ago 2025-07-07
13. 7.0high
    CVE-2025-32023Redis allows out of bounds writes in hyperloglog commands leading to RCE

    1 exploitEPSS 6.5% chance of exploitation in 30 days, percentile 94%EPSS 6.5%Redis
    16 mo ago 2025-07-07
14. 4.7med
    CVE-2025-27151redis-check-aof may lead to stack overflow and potential RCE

    EPSS 1.1% chance of exploitation in 30 days, percentile 65%EPSS 1.1%Redis
    17 mo ago 2025-05-29
15. 7.5high
    CVE-2025-21605Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client

    Redis
    18 mo ago 2025-04-23
16. 4.4med
    CVE-2024-51741Redis allows denial-of-service due to malformed ACL selectors

    Redis
    21 mo ago 2025-01-06
17. 7.0high
    CVE-2024-46981Redis' Lua library commands may lead to remote code execution

    EPSS 8.2% chance of exploitation in 30 days, percentile 95%EPSS 8.2%Redis
    21 mo ago 2025-01-06
18. 7.0high
    CVE-2024-31449Lua library commands may lead to stack overflow and RCE in Redis

    EPSS 4.5% chance of exploitation in 30 days, percentile 91%EPSS 4.5%Redis
    2 y ago 2024-10-07
19. 5.5med
    CVE-2024-31228Denial-of-service due to unbounded pattern matching in Redis

    EPSS 1.0% chance of exploitation in 30 days, percentile 63%EPSS 1.0%Redis
    2 y ago 2024-10-07
20. 4.4med
    CVE-2024-31227Denial-of-service due to malformed ACL selectors in Redis

    Redis
    2 y ago 2024-10-07
21. 8.1high
    CVE-2023-41056Redis vulnerable to integer overflow in certain payloads

    EPSS 2.6% chance of exploitation in 30 days, percentile 85%EPSS 2.6%Redis
    2 y ago 2024-01-10
22. 3.6low
    CVE-2023-45145Redis Unix-domain socket may have be exposed with the wrong permissions for a short time window.

    Redis
    3 y ago 2023-10-18
23. 3.3low
    CVE-2023-41053Redis SORT_RO may bypass ACL configuration

    Redis
    3 y ago 2023-09-06
24. 5.9med
    CVE-2021-31294Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifical…

    EPSS 1.3% chance of exploitation in 30 days, percentile 71%EPSS 1.3%Redis
    3 y ago 2023-07-15
25. 7.0high
    CVE-2022-24834Heap overflow issue with the Lua cjson library used by Redis

    EPSS 41.4% chance of exploitation in 30 days, percentile 99%EPSS 41.4%Redis
    3 y ago 2023-07-13
26. 7.4high
    CVE-2023-36824Heap overflow in COMMAND GETKEYS and ACL evaluation in Redis

    EPSS 77.4% chance of exploitation in 30 days, percentile 100%EPSS 77.4%Redis
    3 y ago 2023-07-11
27. 7.5high
    CVE-2023-31655redis v7.0.10 was discovered to contain a segmentation violation.

    EPSS 1.0% chance of exploitation in 30 days, percentile 64%EPSS 1.0%Redis
    3 y ago 2023-05-18
28. 5.5med
    CVE-2023-28856`HINCRBYFLOAT` can be used to crash a redis-server process

    EPSS 1.3% chance of exploitation in 30 days, percentile 70%EPSS 1.3%Redis
    3 y ago 2023-04-18
29. 5.5med
    CVE-2023-28425Specially crafted MSETNX command can lead to denial-of-service

    EPSS 58.5% chance of exploitation in 30 days, percentile 99%EPSS 58.5%Redis
    3 y ago 2023-03-20
30. 5.5med
    CVE-2023-25155Integer Overflow in several Redis commands can lead to denial of service.

    Redis
    3 y ago 2023-03-02