773 PoCs | 119 CISA KEV

tag

Redis

RediShell: Redis Lua Scripting Use-After-Free Leading to JOP-Chained Remote Code Execution (CVE-2025-49844) EPSS 87%

CVE-2025-49844 binary Patched

CVE-2025-49844binaryCRITICAL 9.9Patched2026-07-06Mercator Configuration SSRF Chained to Internal Redis RCE (CVE-2026-49345)

CVE-2026-49345 web Unverified

CVE-2026-49345webCRITICALUnverified2026-07-05AutoGPT Platform Chat Session IDOR / Session Hijack — CVE-2026-30950

CVE-2026-30950 (GHSA-q58p-v9r9-7gqj) web Patched

CVE-2026-30950webHIGH 7.1Patched2026-07-05Redis Vector Set Duplicate HNSW Node ID RCE

None assigned as of 2026-07-03 network Unverified

None assigned as of 2026-07-03networkCRITICALUnverified2026-07-03TossUp — TerraMaster TOS Unauthenticated Redis Root RCE + NFS LPE

N/A (vendor confirmed TOS4 is EOL; no fix planned) network Unpatched

N/AnetworkCRITICALUnpatched2026-05-18