Redis vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
63 matching records
- High8.1Important: php:8.3 security updateOpen the advisoryOct 22, 2026
- UnknownApache bRPC: Denial of Service via Unbounded Redis Inline Command AllocationCheck if you run itEPSS 0.57%Oct 21, 2026
- UnknownThe Redis server command parser in Apache bRPC accepts an empty RESP array as a command header.Check if you run itEPSS 0.95%Oct 21, 2026
- UnknownApache bRPC: Stack Exhaustion via Unbounded Recursion in Redis Reply ParserCheck if you run itEPSS 0.46%Oct 21, 2026
- Critical10.0IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared Redis under any tenant's key.Check if you run itEPSS 0.27%Oct 20, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component.Check if you run itEPSS 0.73%Oct 19, 2026
- High7.1A flaw was found in Redis community.Check if you run itEPSS 0.71%Sep 17, 2026
- High7.8ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation VulnerabilityCheck if you run itEPSS 0.24%Sep 16, 2026
- High8.8Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement updateOpen the advisorySep 9, 2026
- Low3.7Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.Check if you run itEPSS 0.56%May 25, 2026
- High7.7RedisBloom is a probabilistic data structures module for Redis.Check if you run itEPSS 1.70%May 5, 2026
- High7.7RedisTimeSeries is a time-series module for Redis.Check if you run itEPSS 1.28%May 5, 2026
- Medium6.1Redis is an in-memory data structure store.Check if you run itEPSS 3.09%May 5, 2026
- High7.7Redis is an in-memory data structure store.Patch nowKEVEPSS 4.03%May 5, 2026
- High7.7Redis is an in-memory data structure store.Check if you run itEPSS 2.61%May 5, 2026
- Medium6.5@langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph.Check if you run itEPSS 4.01%Feb 20, 2026
- High7.7Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 7.47%Nov 2, 2025
- Critical10.0Redis redis Use After FreePatch nowKEVEPSS 82.64%Oct 3, 2025
- High7.3Running Lua function as a different userCheck if you run itEPSS 0.74%Oct 3, 2025
- Medium6.3Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 1.09%Oct 3, 2025
- High8.8Lua library commands may lead to integer overflow and potential RCECheck if you run itEPSS 3.92%Oct 3, 2025
- High7.5Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows attackers to crash the service via network.Check if you run itEPSS 1.26%Aug 14, 2025
- HighGHSA-2r7g-8hpc-rpq9 is listed by Multi-bulk commands sent by clients can lead to DoS.Open the advisoryJul 6, 2025
- High7.5Redis is an open source, in-memory database that persists on disk.Check if you run itEPSS 1.19%Jul 6, 2025
- High7.8Out of bounds write in hyperloglog commands leads to RCECheck if you run itEPSS 6.47%Jul 6, 2025