Critical Flaw Exposes 60,000 Redis Servers to Remote Exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-49844 | Use-After-Free (RediShell) RCE in Redis Lua Scripting | 9.9 | 83% | PoC |
From the original article
1 min read at infosecurity-magazine.com
A critical security flaw in Redis, a popular in-memory database platform used by about 75% of cloud environments, has left an estimated 60,000 servers vulnerable to remote exploitation. The flaw, identified as CVE-2025-49844 and nicknamed “RediShell,” carries the maximum severity score of 10. 0 under the Common Vulnerability Scoring System (CVSS).
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.