Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Redis

Redis Redis vulnerabilities

49 published CVEs name Redis Redis among the affected products.

Published CVEs
49
Last 12 months
5
Critical
1
Known exploited
0

Critical 1High 27Medium 16Low 5Not scored 0

CVEs per yearBy the year they were published

  1. 20161
  2. 202113
  3. 20224
  4. 202310
  5. 20244
  6. 202512
  7. 20265

Newest CVEs

  • CVE-2026-81934

    Redis TLS pending-data list use-after-free

    Redis · Redis

    High7.5
  • CVE-2026-66373

    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same…

    Redis · Redis

    High7.5
  • CVE-2026-25243

    redis-server RESTORE invalid memory access may allow remote code execution

    redis · redis

    High7.7
  • CVE-2026-23631

    redis-server Lua use-after-free may allow remote code execution

    redis · redis

    Medium6.1
  • CVE-2026-23479

    redis-server use-after-free in unblock client flow may allow remote code execution

    redis · redis

    High7.7
  • CVE-2025-62507

    Redis: Bug in XACKDEL may lead to stack overflow and potential RCE

    redis · redis

    High7.7
  • CVE-2025-49844

    Redis Lua Use-After-Free may lead to remote code execution

    redis · redis

    Critical10.0
  • CVE-2025-46819

    Redis is vulnerable to DoS via specially crafted LUA scripts

    redis · redis

    Medium6.3
  • CVE-2025-46818

    Redis: Authenticated users can execute LUA scripts as a different user

    redis · redis

    Medium6.0
  • CVE-2025-46817

    Lua library commands may lead to integer overflow and potential RCE

    redis · redis

    High7.0