Redis — Security Intelligence & Vulnerability Profile

Doctrinal Security Principle

The absence of known CVEs does not guarantee absolute security of a software component. This dossier catalogs verified vulnerabilities, CISA KEV entries, and vendor advisories vetted by Hermes Codex.

---

1. Software Identity & Security Posture

Parameter	Technical Specification
Official Name	Redis
Vendor / Project	redis
Canonical ID	redis:redis
Versioning Scheme	semver
CPE Identifiers	cpe:2.3:a:redis:redis:*:*:*:*:*:*:*:*
Overall Posture	CRITICAL
Recommended Safe Release	7.0.0

Documented CVEs

1 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

1 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

1 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 7.0.0 to neutralize known flaws.

---

2. 30-Day Risk Trajectory & Trend Evolution

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

99.4 %

= Stable over 30d

CISA KEV Activity

1

Active in-the-wild exploitation

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

---

3. Vulnerability History & Version Applicability Matrix

CVE	CVSS Score	EPSS Probability	CISA KEV	Affected Versions	Fixed In	Hermes Analysis
CVE-2022-0543	10 (CRITICAL)	99.4%	CISA KEV	< v6.0.16, < v6.2.6	6.0.16, 6.2.6, 7.0.0	-

---

4. Ransomware & Threat Actor Exposure

Vulnerabilities impacting Redis are actively leveraged in real-world intrusion campaigns:

• CVE-2022-0543: Known in opportunistic exploitation

---

5. Evaluate Running Versions in Interactive Workbench

Are you operating Redis in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for Redis Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.