#RediShell

A practical lab environment for testing and understanding the critical CVE-2025-49844 (RediShell) vulnerability in Redis. Update to Redis 8.2.2+ immediately #RediShell #Security #RedTeam #PenTesting #SecurityResearch

🔴 RediShell (CVE-2025-49844) RCE crítica (CVSS 10.0) decubierta tras 13 años. Todavía hay +8500 instancias expuestas, asegura que ninguna es la tuya ;) 👉Más info:

📢🚨 RediShell, a 13 year old Redis vulnerability, leaves about 60,000 unauthenticated servers open to remote code execution. Read more: #Cybersecurity #InfoSec #RediShell #Redis #Vulnerability #InfoSec

The "RediShell" RCE vulnerability (CVE-2025-49844) poses a critical risk to over 8,500 exposed Redis instances, urging users to apply patches and enable authentication immediately to prevent remote code execution threats. #RediShell #CVE202549844

⚠️ 13-year-old Critical Redis RCE Vulnerability Let Attackers Gain Full Access to Host System Read more: A 13-year-old critical remote code execution (RCE) vulnerability in Redis, dubbed #RediShell, allows attackers to gain full access to the underlying host system. The flaw, tracked as CVE-2025-49844, was discovered by Wiz Research and has been assigned the highest possible CVSS severity score of 10.0, a rating reserved for the most severe security issues. The vulnerability is a Use-After-Free (UAF) memory corruption bug that has existed in the Redis source code for approximately 13 years. A post-authentication attacker can exploit this flaw by sending a specially crafted Lua script. #cybersecuritynews

🚨 New Redis RCE Alert: CVE-2025-49844 Wiz Research uncovers #RediShell — a critical 13-year-old bug in Redis affecting 75% of cloud environments. 🔓 Exploits Lua scripting to escape sandbox & execute native code 🔥 CVSS 10.0 — full host takeover possible 📌 Patch now! The below DefenderXDR hunt for any internet facing Redis server in your MDE environment.🫡 #Cybersecurity #RedisRCE #DefenderXDR

🚨 Security Advisory — #RediShell RCE (CVE-2025-49844) 🚨​ The RediShell #RCE is a critical use-after-free flaw in Redis's Lua engine enabling host-level Remote Code Execution (RCE).​ ☑️59,000+ exposed Redis instances detected​ ☑️8,500 unpatched Redis instances detected​ ​ Query 👇​ "product: Redis​" "cve_id: CVE-2025-49844​​" ​ 🔗Link​

🔥 Curious how we exploited CVE-2025-49844 (RediShell)? From a 2-bit reset to 0-click RCE. Come see me at Hexacon 2025 - Paris, where I’ll share in-depth technical details on the exploitation. See you on Friday 👋 #Redis #Security #RediShell @hexacon_fr

ℹ️#RediShell RCE Vulnerability (CVE-2025-49844)​ The RediShell #RCE is a critical use-after-free flaw in Redis's Lua engine enabling host-level Remote Code Execution.​ 📺 Watch the breakdown:​ 🔎 Exposed Redis instances detected via Criminal IP​ Query 👉 "product: Redis"​ 🔗 Query 👉 "cve_id: CVE-2025-49844"​ 🔗

#RediShell: Redis/Valkey Get ‘Perfect 10’ Critical RCE Vuln - Security Boulevard