Redis — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• Critical Vulnerabilities in Tenable Security Center Prompt Urgent Patch Release

  Tenable has released Security Center Patch SC202607.1 to address multiple vulnerabilities in third-party components, including Apache, OpenSSL, PostgreSQL, PHP, and Redis. The patch resolves critical issues such as SQL…

  2 articles · Updated July 21, 2026
• Kimi K3 AI Discovers Multiple Zero-Day Vulnerabilities in Redis Database

  The Chinese AI model Kimi K3 has reportedly discovered 19 zero-day vulnerabilities in the Redis database, specifically in version 8.8.0. Security researcher Chaofan Shou claims that Kimi K3 generated proof-of-concept…

  8 articles · Updated July 24, 2026
• Ivanti EPMM Zero-Day Vulnerability Exploited in Active Attacks

  Ivanti has disclosed a zero-day vulnerability (CVE-2026-6973) in its Endpoint Manager Mobile (EPMM) product, which has been actively exploited by attackers. This flaw allows authenticated users with administrative…

  24 articles · Updated May 7, 2026
• Microsoft Unveils GigaWiper: A Modular Destructive Backdoor for Windows

  Microsoft has revealed GigaWiper, a destructive Windows backdoor that integrates components from three malware families, including Crucio and FlockWiper. This Golang-based malware is designed for post-initial access…

  18 articles · Updated July 9, 2026
• Attackers Exploit CVE-2026-39987 to Deploy NKAbuse Malware via Hugging Face

  A critical vulnerability in the marimo Python notebook platform, tracked as CVE-2026-39987, has been actively exploited to deploy a new variant of NKAbuse malware. The flaw allows for remote code execution without…

  5 articles · Updated April 16, 2026
• Critical Redis Lua Use-After-Free RCE Vulnerability Exploited

  CVE-2025-49844 is a critical use-after-free vulnerability in the Redis Lua interpreter, affecting all versions up to 8.2.1. Authenticated attackers can exploit this flaw by sending a crafted EVAL command that…

  2 articles · Updated June 28, 2026
• Critical Vulnerabilities in LangGraph AI Framework Enable Full Server Control

  Check Point Research identified critical vulnerabilities in LangGraph, an AI framework with 46.5 million downloads last month. The flaws allow attackers to execute remote code and gain control over affected servers. The…

  7 articles · Updated June 15, 2026
• Dell PowerFlex Security Updates Address Multiple Vulnerabilities

  Dell has released two security updates (DSA-2025-434 and DSA-2025-435) addressing multiple vulnerabilities in PowerFlex Rack and Appliance systems. The updates cover numerous CVEs, including critical vulnerabilities in…

  2 articles · Updated May 23, 2026
• Critical Redis and Lua Vulnerabilities Affect Multiple Ubuntu Releases

  A series of vulnerabilities have been identified in Redis and Lua, affecting Ubuntu versions 16.04 to 24.04 LTS. The most critical issue, CVE-2025-49844, allows remote attackers to exploit specially crafted Lua scripts,…

  2 articles · Updated April 14, 2026
• Critical Redis Vulnerability CVE-2026-23479 Enables Remote Code Execution

  A critical remote code execution vulnerability, CVE-2026-23479, has been identified in Redis, affecting versions from 7.2.0 onwards. This flaw, rated 8.8 by CVSS 3.1 and 7.7 by CVSS 4.0, is a use-after-free issue in the…

  6 articles · Updated June 4, 2026

Recent Intelligence Reports

• Kimi K3: Chinese AI finds several zero-day vulnerabilities in redis database — Heise.De · July 24, 2026
• Kimi K3 Beat Claude at Coding, Now It's Allegedly Writing Zero — Inkl · July 24, 2026
• Kimi K3 AI discover critical remote code execution flaws in Redis — Feeds.4Sysops · July 24, 2026
• Kimi K3 AI discovers critical remote code execution flaws in Redis — Feeds.4Sysops · July 24, 2026
• Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say — Thehackernews · July 24, 2026
• Security Advisory Cve202623479 Cve202625243 Cve 2026 25588 Cve202625589 Cve 2026 23631 — redis.io · July 24, 2026
• New Kimi K3 AI Agent Uncovers Redis Remote Code Execution Flaws in Just 27 Minutes — Gbhackers · July 23, 2026
• CVE-2026-64880 | Tenable® — Tenable · July 21, 2026

Related Entities