Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

RediShell: Critical Remote Code Execution Vulnerability (CVE-2025-49844) in Redis, 10 CVSS score

wiz.io | vulnerability | CVE-2025-49844 | #rce | #cloud-security | #vulnerability | #redis | #wiz-research | #cve-2025-49844

Summary

Wiz Research details RediShell (CVE-2025-49844), a Redis RCE rated CVSS 10.0: a 13-year-old use-after-free bug lets an authenticated attacker escape the Lua sandbox and run code on the host.
Published
Collected

original ↗

Related coverage

  1. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  2. CVE-2023-38545 high severity vulnerability in cURL: everything you need to know (wiz.io)
  3. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)
  4. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  5. 38TB of data accidentally exposed by Microsoft AI researchers (wiz.io)
  6. I know what you mined last summer: summarizing Summer '23 cryptomining activity (wiz.io)

back