Overview Recently, NSFOCUS CERT detected that Redis issued a security bulletin and fixed the Redis Lua code execution vulnerability (CVE-2025-49844); Because Redis’s Lua script engine has a ...

The critical vulnerability allows attacks to escape the in-memory data store’s Lua sandbox and subsequently execute arbitrary ...

"The combination of widespread deployment, default insecure configurations, and the severity of the vulnerability creates an ...

A critical-severity vulnerability that lingered in Redis for 13 years potentially exposes 60,000 servers to exploitation.

The Redis security team has issued a warning to system administrators and cloud infrastructure providers after discovering a ...

Just like that, the Redis host is compromised, and an attacker can proceed to engage in malicious activity such as: stealing credentials such as SSH keys, authentication tokens, and digital ...

A 13-year-old critical flaw in Redis servers, rated a perfect 10 out of 10 in severity, can let an authenticated user trigger ...

The Redis security team has released patches for a maximum severity vulnerability that could allow attackers to gain remote code execution on thousands of vulnerable instances.

The scarce resource in the SDLC is no longer engineering hours developing features, but rather the trust that a particular ...