14 entries matching redis — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-119577 | ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access thro | HIGH | 7.6 | 21%ile | NVD | 2026-10-30 |
| CVE-2026-50000 | SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept documen | MEDIUM | 5.0 | 30%ile | NVD | 2026-10-30 |
| CVE-2026-119330 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation A | LOW | 3.5 | 13%ile | NVD | 2026-10-30 |
| CVE-2026-99202 | In the Linux kernel, the following vulnerability has been resolved: scsi: libsas: Fix SMP IO deadlock during HA resume | UNKNOWN | — | 7%ile | NVD | 2026-10-28 |
| CVE-2026-34501 | Apache Portable Runtime Utility: Heap buffer overflow in APR redis client | HIGH | 7.5 | 43%ile | Microsoft | 2026-08-11 |
| CVE-2026-72568 | Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler | HIGH | 7.1 | — | Microsoft | 2026-08-11 |
| CVE-2026-66373 | Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code executio | HIGH | 7.5 | 59%ile | Microsoft | 2026-07-14 |
| CVE-2026-23479 | redis-server use-after-free in unblock client flow may allow remote code execution | UNKNOWN | — | 85%ile | Microsoft | 2026-05-12 |
| CVE-2026-23631 | redis-server Lua use-after-free may allow remote code execution | UNKNOWN | — | 88%ile | Microsoft | 2026-05-12 |
| CVE-2026-25243 | redis-server RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 91%ile | Microsoft | 2026-05-12 |
| CVE-2026-25588 | RedisTimeSeries RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 70%ile | Microsoft | 2026-05-12 |
| CVE-2026-25589 | RedisBloom RESTORE invalid memory access may allow remote code execution | UNKNOWN | — | 77%ile | Microsoft | 2026-05-12 |
| CVE-2025-27151 | redis-check-aof may lead to stack overflow and potential RCE | MEDIUM | 4.7 | 64%ile | Microsoft | 2025-05-13 |
| CVE-2025-21605 | Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated client | HIGH | 7.5 | 59%ile | Microsoft | 2025-04-08 |