Product by Debian
Valkey
19 known vulnerabilities in Valkey (Debian), 0 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-49844 | Redis Lua Use-After-Free may lead to remote code execution | 10.0 | |
| High | CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | 8.8 | |
| High | CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | 8.8 | |
| High | CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | 8.1 | |
| High | CVE-2025-32023 | Redis allows out of bounds writes in hyperloglog commands leading to RCE | 7.0 | |
| Critical | CVE-2024-46981 | Redis' Lua library commands may lead to remote code execution | 7.0 | |
| High | CVE-2025-46817 | Lua library commands may lead to integer overflow and potential RCE | 7.0 | |
| High | CVE-2026-63639 | Valkey: UAF in stream deserialization may lead to remote code execution | 8.8 | |
| High | CVE-2025-48367 | Redis DoS Vulnerability due to bad connection error handling | 7.5 | |
| High | CVE-2026-21863 | Malformed Valkey Cluster bus message can lead to Remote DoS | 7.5 | |
| High | CVE-2025-67733 | Valkey Affected by RESP Protocol Injection via Lua error_reply | 8.5 | |
| High | CVE-2025-46819 | Redis is vulnerable to DoS via specially crafted LUA scripts | 6.3 | |
| High | CVE-2026-56684 | Valkey: TLS pending-data processing use-after-free may allow remote code execution | 7.5 | |
| High | CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | 7.5 | |
| Critical | CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | 4.7 | |
| High | CVE-2025-46818 | Redis: Authenticated users can execute LUA scripts as a different user | 6.0 | |
| Medium | CVE-2026-82677 | valkey-io valkey Module Timer module.c moduleTimerHandler double free | 2.4 | |
| Low | CVE-2026-82631 | valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free | 2.2 | |
| Medium | CVE-2024-51741 | Redis allows denial-of-service due to malformed ACL selectors | 4.4 |
News
- 17 old software bugs that took way too long to squashcsoonline,
- Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)thehackernews,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 20sans-atrisk,
- Fwd: @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 19sans-atrisk,
- Latvian National Sentenced in Connection with Providing Advice to Multiple Ransomware Groupssans-newsbites-mail,