redis vulnerabilities

CVEs per yearBy the year they were published

1. 20161
2. 202114
3. 20238
4. 20237
5. 202511
6. 20255
7. 20265

Newest CVEs

• CVE-2026-81934

  Redis TLS pending-data list use-after-free

  Redis · Redis

  High7.5
• CVE-2026-66373

  Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same…

  Redis · Redis

  High7.5
• CVE-2026-25243

  redis-server RESTORE invalid memory access may allow remote code execution

  redis · redis

  High7.7
• CVE-2026-23631

  redis-server Lua use-after-free may allow remote code execution

  redis · redis

  Medium6.1
• CVE-2026-23479

  redis-server use-after-free in unblock client flow may allow remote code execution

  redis · redis

  High7.7
• CVE-2025-62507

  Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

  redis · redis

  High7.7
• CVE-2025-49844

  Redis Lua Use-After-Free may lead to remote code execution

  redis · redis

  Critical10.0
• CVE-2025-46819

  Redis is vulnerable to DoS via specially crafted LUA scripts

  redis · redis

  Medium6.3
• CVE-2025-46818

  Redis: Authenticated users can execute LUA scripts as a different user

  redis · redis

  Medium6.0
• CVE-2025-46817

  Lua library commands may lead to integer overflow and potential RCE

  redis · redis

  High7.0