CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Free accounts get a daily email of the CVEs that match up to 3 of their products on My program; subscribers get each one the moment it is published. Where the data comes from: sources.

Updated under an hour ago (Oct 30, 2026, 5:50 AM ET)

What this means for you

This week: 3,335 CVEs published, 225 critical, and 2 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stackFree account, 3 products This week's critical CVEs Exploited in the last 30 days

Published in the last 7 days: 3,335; Show in the list
Critical, last 7 days: 225; Show in the list
Healthcare-tagged, last 7 days: 3; Show in the list
Known exploited (CISA KEV): 1,764; Show in the list

Showing CVEs that name the product redis:redis. Show all products

11 CVEs

Showing 1 to 10.

CVE	Severity	Title	Published
CVE-2022-0543 Known exploited	Critical 10.0	It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution. Assigned by debian	Feb 18, 2022
CVE-2025-46817	High 7.0	Lua library commands may lead to integer overflow and potential RCE Assigned by GitHub_M	Oct 3, 2025
CVE-2025-46818	Medium 6.0	Redis: Authenticated users can execute LUA scripts as a different user Assigned by GitHub_M	Oct 3, 2025
CVE-2025-46819	Medium 6.3	Redis is vulnerable to DoS via specially crafted LUA scripts Assigned by GitHub_M	Oct 3, 2025
CVE-2025-49844	Critical 10.0	Redis Lua Use-After-Free may lead to remote code execution Assigned by GitHub_M	Oct 3, 2025
CVE-2025-62507	High 7.7	Redis: Bug in XACKDEL may lead to stack overflow and potential RCE Assigned by GitHub_M	Nov 4, 2025
CVE-2026-23479	High 7.7	redis-server use-after-free in unblock client flow may allow remote code execution Assigned by GitHub_M	May 5, 2026
CVE-2026-23631	Medium 6.1	redis-server Lua use-after-free may allow remote code execution Assigned by GitHub_M	May 5, 2026
CVE-2026-25243	High 7.7	redis-server RESTORE invalid memory access may allow remote code execution Assigned by GitHub_M	May 5, 2026
CVE-2026-66373	High 7.5	Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution via a RESTORE payload where the same NACK (pending entry) is referenced by mo… Assigned by mitre	Jul 24, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.