Product by Open Source
Redis
10 known vulnerabilities in Redis (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 8.8 | |
| High | CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | 8.8 | |
| High | CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 8.1 | |
| High | CVE-2026-25589 | RedisBloom RESTORE invalid memory access may allow remote code execution | 8.8 | |
| High | CVE-2026-25588 | RedisTimeSeries RESTORE invalid memory access may allow remote code execution | 8.8 | |
| High | CVE-2026-66373 | Redis: Double Free | 7.5 | |
| High | CVE-2026-81934 | Redis TLS pending-data list use-after-free | 7.1 | |
| High | CVE-2026-72568 | Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler | 7.1 | |
| Low | CVE-2026-105799 | LangChain: RediSearch Filter Injection via Unescaped Tag/Text Values | — | |
| High | CVE-2026-62356 | open source Redis: security vulnerability | — |
News
- Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)thehackernews,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groupssans-newsbites-mail,