CyberSecBulletin

RedisTimeSeries vulnerabilities

We track 2 vulnerabilities in RedisTimeSeries products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 5, 2026.

2vulnerabilities
0critical
2high
0exploited
7.9average CVSS score

Latest RedisTimeSeries vulnerabilities

  • 8.8 High severity

    RedisTimeSeries: Heap-based Buffer Overflow

    CVE-2026-25588RedisTimeSeriesEPSS 1.28%

    RedisTimeSeries is a time-series module for Redis. In all versions before 1.12.14 of RedisTimeSeries, the module does not properly validate serialized values processed through the Redis RESTORE command. An authenticated attacker with permission to execute REST

  • 7.0 High severity

    RedisTimeSeries: Heap-based Buffer Overflow

    CVE-2024-51480RedisTimeSeries

    RedisTimeSeries is a time-series database (TSDB) module for Redis, by Redis. Executing one of these commands TS.QUERYINDEX, TS.MGET, TS.MRAGE, TS.MREVRANGE by an authenticated user, using specially crafted command arguments may cause an integer overflow, a sub