Redis
In 6 briefs, most recently 7 August 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
1 Redis vulnerability is on CISA's list of vulnerabilities exploited in the wild. Most recent:
- CVE-2022-0543 Debian-specific Redis Server Lua Sandbox Escape Vulnerability
Coverage in DanSec Daily
- Unlimited Technology breach hits 3.8M people, SharePoint flaws exploited in Swiss government attacks, and TeamPCP linked to Redis and supply chain campaigns.
- Covers the IMA Diligence breach affecting 525,000 people, Acer Wave 7 mesh router zero-days, and a Microsoft 365 Android token-theft flaw.
- European Commission breach via Trivy supply chain attack, Cisco source code theft, and FortiClient EMS CVE-2026-35616 actively exploited in the wild.
- Salesforce customer data theft by ShinyHunters, Clop's Oracle EBS zero-day, and Redis 'RediShell' RCE flaw.
- Red Hat and Discord breaches, Cl0p exploiting an Oracle E-Business Suite zero-day, and a GoAnywhere MFT flaw abused in Medusa ransomware attacks.
- Cellcom outage cyberattack, SK Telecom malware breach exposing 27M USIM records, and RVTools supply chain attack delivering Bumblebee malware.