redis has 3 CVEs on record. The busiest recent month was May 2026 with 3. The median CVSS is 8.8 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 0 prev 3
redis vulnerabilities
CVEs affecting redis, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-23479High· 8.8PoCRedis is an in-memory data structure store
Redis is an in-memory data structure store. In redis-server from 7.2.0 until 8.6.3, the unblock client flow does not handle an error return from `processCommandAndResetClient` when re-executing a blocked command. If a blocked client is e…
CVE-2026-25243High· 8.8PoCRedis is an in-memory data structure store
Redis is an in-memory data structure store. In versions of redis-server up to 8.6.3, the RESTORE command does not properly validate serialized values. An authenticated attacker with permission to execute RESTORE can supply a crafted seri…
CVE-2026-23631High· 8.1PoCRedis is an in-memory data structure store
Redis is an in-memory data structure store. In all versions of redis-server with Lua scripting, an authenticated attacker can exploit the master-replica synchronization mechanism to trigger a use-after-free on replicas where replica-read…