Open Source Redis

Name: Open Source Redis
Brand: Open Source

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical14high8medium3low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-49844US	critical9.9	82.6% (100th)	Exploit	7.4.6	2025-10-03	6 versions
CVE-2022-24834US	high8.8	41.4% (99th)	Exploit	7.2-rc3	2023-07-13	4 versions
CVE-2024-46981US	critical9.8	8.18% (95th)	Exploit	7.2.7	2025-01-06	3 versions
CVE-2025-62507US	high8.8	7.47% (94th)	Exploit	8.2.3	2025-11-04	< 8.2.3
CVE-2025-32023US	high7.8	6.47% (94th)	Exploit	7.4.5	2025-07-07	4 versions
CVE-2024-31449US	high8.8	4.46% (91st)	Exploit	7.2.6	2024-10-07	3 versions
CVE-2026-25243US	high8.8	4.03% (91st)	Exploit	7.2.14	2026-05-05	5 versions
CVE-2025-46817US	high8.8	3.92% (90th)	Exploit	8.2.2	2025-10-03	6 versions
CVE-2026-23631US	high8.1	3.09% (88th)	Exploit	6.2.22	2026-05-05	5 versions
CVE-2026-23479US	high8.8	1.66% (77th)	Exploit	8.2.6	2026-05-05	4 versions
CVE-2025-46819US	high7.1	1.09% (65th)	Exploit	7.4.6	2025-10-03	6 versions
CVE-2025-46818US	high7.3	0.74% (55th)	Exploit	8.2.2	2025-10-03	6 versions
CVE-2026-62356US	—	—	Exploit	8.8.2	—	5 versions
CVE-2023-36824US	high8.8	77.4% (100th)	—	7.2-rc3	2023-07-11	2 versions
CVE-2023-22458US	medium5.5	72.0% (99th)	—	6.2.9	2023-01-20	2 versions
CVE-2022-36021US	medium5.5	59.8% (99th)	—	6.2.11	2023-03-01	3 versions
CVE-2022-35977US	medium5.5	13.5% (96th)	—	7.0.8	2023-01-20	2 versions
CVE-2022-24735US	high7.8	2.26% (83rd)	—	6.2.7	2022-04-27	2 versions
CVE-2026-25589US	high8.8	1.70% (77th)	—	6.2.22	2026-05-05	5 versions
CVE-2022-24736US	medium5.5	1.50% (74th)	—	6.2.7	2022-04-27	2 versions
CVE-2026-25588US	high8.8	1.28% (70th)	—	8.2.6	2026-05-05	5 versions
CVE-2023-28856US	medium6.5	1.26% (69th)	—	6.2.12	2023-04-18	3 versions
CVE-2025-48367US	—	1.19% (68th)	—	7.4.5	2025-07-07	4 versions
CVE-2025-27151US	critical9.8	1.06% (64th)	—	7.2.9	2025-05-29	3 versions
CVE-2023-28859US	medium6.5	1.03% (64th)	—	no fix	2023-03-26	≤ Python Client <=4.5.3
CVE-2023-28858US	low3.7	1.02% (63rd)	—	no fix	2023-03-26	≤ Python Client <=4.5.3
CVE-2024-31228US	medium6.5	1.01% (63rd)	—	6.2.16	2024-10-07	3 versions
CVE-2023-25155US	medium6.5	0.90% (60th)	—	6.0.18	2023-03-02	3 versions
CVE-2026-66373US	—	0.87% (59th)	—	8.8.0	2026-07-25	< 8.8.0
CVE-2025-21605US	—	0.87% (59th)	—	6.2.18	2025-04-23	3 versions
CVE-2026-81934US	—	0.48% (41st)	—	8.8.2	2026-08-27	5 versions
CVE-2023-45145US	low3.6	0.44% (38th)	—	7.2.2	2023-10-18	< 7.2.2
CVE-2024-31227US	—	0.40% (34th)	—	6.2.16	2024-10-07	3 versions
CVE-2025-46686US	—	0.32% (25th)	—	no fix	2025-07-23	≤ 8.0.3
CVE-2024-51741US	—	0.30% (23rd)	—	7.4.2	2025-01-06	2 versions
CVE-2023-41053US	low3.3	0.29% (21st)	—	7.0.13	2023-09-06	2 versions
CVE-2026-72568US	—	0.23% (14th)	—	no fix	2026-08-10	≤ 8.8.1

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-190Integer Overflow or Wraparound8 CVEs
CWE-122Heap-based Buffer Overflow5 CVEs
CWE-416Use After Free5 CVEs
CWE-121Stack-based Buffer Overflow3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)37 CVEs
NLNCSC-NL (CSAF)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan