Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
NextGen Healthcare Mirth Connect
Mirth Connect versions up to 4.7.1 are vulnerable to SQL injection and XXE flaws. The advisory recommends updating to version 4.7.2 or later.
Read more → -
Orthanc DICOM Server
Orthanc DICOM Server versions prior to 1.13.0 can be crashed via a crafted PNG or JPEG image.
Read more → -
2026-012: Critical Vulnerabilities in Check Point Products
Two CVSS 9.8 vulnerabilities affect Check Point Security Gateway, Management Server, and Spark Firewall when VPN is enabled. An unauthenticated remote attacker could execute arbitrary code.
Read more → -
ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability
Remote code execution in OpenAI Codex requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted folder, leading to remote code execution.
Read more → -
ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution Vulnerability
Remote code execution is possible when a user opens a crafted folder.
Read more → -
ZDI-26-652: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory notes a TOCTOU flaw in the cache mechanism of TrendAI Apex One Security Agent that enables local privilege escalation.
Read more → -
ZDI-26-653: TrendAI Apex One Security Agent Cache Mechanism Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
A TOCTOU flaw in the Apex One Security Agent cache mechanism permits local privilege escalation.
Read more → -
ZDI-26-654: TrendAI Apex One Incomplete Cleanup Local Privilege Escalation Vulnerability
The vulnerability enables local privilege escalation after an attacker can run low-privileged code on the system.
Read more → -
ZDI-26-655: PAPPL Printer IPP Processing Stack-based Buffer Overflow Local Privilege Escalation Vulnerability
PAPPL's IPP processing stack contains a stack-based buffer overflow that can be used for local privilege escalation.
Read more → -
ZDI-26-656: PAPPL Job Processing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via a heap-based buffer overflow in PAPPL job processing.
Read more → -
ZDI-26-657: ASUS Control Center Express Agent Missing Authentication Remote Code Execution Vulnerability
ASUS Control Center Express Agent can be remotely exploited without authentication.
Read more → -
ZDI-26-658: Adobe Acrobat Pro DC JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
An integer overflow in JPEG parsing can be triggered by a malicious PDF or web page, leading to remote code execution.
Read more → -
ZDI-26-659: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Acrobat Reader DC can disclose data via an out-of-bounds read when parsing JPEG2000 files.
Read more → -
ZDI-26-660: Adobe Acrobat Reader DC Font Parsing Use-After-Free Information Disclosure Vulnerability
Adobe Acrobat Reader DC can disclose sensitive information via a font-parsing use-after-free when a user opens a crafted PDF or visits a malicious page.
Read more → -
ZDI-26-661: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
The use-after-free occurs in Acrobat Reader DC’s annotation handling and requires a user to open a malicious file or visit a crafted page.
Read more → -
ZDI-26-662: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF or load a malicious webpage.
Read more → -
ZDI-26-663: Adobe Acrobat Pro DC Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or visit a malicious webpage.
Read more → -
ZDI-26-664: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or load a malicious webpage.
Read more → -
ZDI-26-665: Adobe Acrobat Reader DC Annots Report Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a malicious web page.
Read more → -
ZDI-26-666: Adobe Acrobat Reader DC JPEG2000 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Acrobat Reader DC may disclose memory contents when parsing crafted JPEG2000 files.
Read more → -
ZDI-26-667: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF or visit a malicious web page.
Read more → -
ZDI-26-668: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious web page.
Read more → -
ZDI-26-669: Adobe Acrobat Reader DC JBIG2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
The flaw is an out-of-bounds read in the JBIG2 parser of Adobe Acrobat Reader DC.
Read more → -
ZDI-26-670: Adobe Acrobat Pro DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
Adobe Acrobat Pro DC can disclose sensitive information via an out-of-bounds read.
Read more → -
ZDI-26-671: Adobe Acrobat Reader DC Dialog Object Type Confusion Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF or visit a crafted web page.
Read more → -
ZDI-26-672: Adobe Acrobat Reader DC PDF File Parsing Integer Underflow Information Disclosure Vulnerability
An integer underflow in PDF parsing can disclose sensitive information.
Read more → -
ZDI-26-673: Adobe Acrobat Pro DC Doc Object Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious web page.
Read more → -
ZDI-26-674: Adobe Acrobat Reader DC Annotation Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or load a malicious web page.
Read more → -
ZDI-26-675: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF or visit a malicious webpage.
Read more → -
ZDI-26-676: Adobe Acrobat Reader DC DigSig Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or load a malicious webpage.
Read more → -
ZDI-26-677: Adobe Photoshop DCM JPEG-LS Image Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires a user to open a malicious JPEG-LS file or visit a crafted page.
Read more → -
ZDI-26-678: Adobe Photoshop DCM File Parsing Integer Overflow Remote Code Execution Vulnerability
An integer overflow in Photoshop’s DCM file parser can enable remote code execution.
Read more → -
ZDI-26-679: Adobe Photoshop DCM JPEG Image Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious JPEG file or visit a crafted page.
Read more → -
2026-011: Critical Vulnerabilities in SAP Kernel and NetWeaver Message Server
The advisory reports two remotely exploitable vulnerabilities affecting the SAP Kernel and NetWeaver Message Server. Both can lead to arbitrary OS command execution under the SAP installation account.
Read more → -
CISA KEV — Fortinet Multiple Products (CVE-2025-25249) +3 more
Four actively exploited CVEs affecting Fortinet, Citrix NetScaler, Google Chromium V8, and Cisco FMC have been added to CISA’s KEV Catalog.
Read more → -
ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a crafted web page.
Read more → -
ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability
Integer overflow in GEM file parsing can lead to remote code execution when a malicious file is opened.
Read more → -
ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability
Remote code execution is possible but requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-639: Oracle VirtualBox VMSVGA Heap-based Buffer Overflow Local Privilege Escalation Vulnerability
The issue is a heap-based buffer overflow in VirtualBox’s VMSVGA driver.
Read more → -
ZDI-26-640: Oracle VirtualBox VirtioSCSI Uninitialized Memory Information Disclosure Vulnerability
Uninitialized memory in VirtualBox's VirtioSCSI driver can disclose guest information to a local attacker.
Read more → -
ZDI-26-641: Oracle VirtualBox VirtioSCSI Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability is an out-of-bounds read in Oracle VirtualBox's VirtioSCSI driver that can disclose information.
Read more → -
ZDI-26-642: Oracle VirtualBox IDisplay Out-Of-Bounds Read Local Privilege Escalation Vulnerability
The IDisplay component contains an out-of-bounds read that can be used for local privilege escalation.
Read more → -
ZDI-26-643: Oracle VirtualBox VMSVGA Out-Of-Bounds Read Information Disclosure Vulnerability
Oracle VirtualBox’s VMSVGA driver contains an out-of-bounds read that can disclose information.
Read more → -
ZDI-26-644: Oracle VirtualBox VMSVGA Race Condition Local Privilege Escalation Vulnerability
The issue is a race condition in VirtualBox's VMSVGA driver that enables local privilege escalation.
Read more → -
ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability
Authentication is required to exploit a command injection in FortiSandbox’s write_remote_backup_to_crontab functionality.
Read more → -
ZDI-26-646: Progress Software Kemp LoadMaster escape_quotes Uninitialized Memory Remote Code Execution Vulnerability
Authentication is required to exploit the uninitialized memory remote code execution flaw in Kemp LoadMaster.
Read more → -
ZDI-26-647: VMware Workstation VMXNET3 TSO Segmentation Integer Overflow Local Privilege Escalation Vulnerability
VMware Workstation's VMXNET3 driver has a TSO segmentation integer overflow that can be used for local privilege escalation.
Read more → -
ZDI-26-629: Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability
The vulnerability allows remote attackers to disclose sensitive information on affected Microsoft Azure installations without authentication.
Read more → -
ZDI-26-630: NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability
Remote attackers can trigger an integer overflow in LabVIEW VI file parsing to disclose sensitive information.
Read more → -
ZDI-26-631: NI LabVIEW VI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
An out-of-bounds read in LabVIEW VI file parsing can disclose information.
Read more → -
ZDI-26-632: WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via a stack-based buffer overflow in the epm connect component of WatchGuard FireWare OS.
Read more → -
ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability
An integer overflow in GIMP’s PSP file parser can lead to remote code execution.
Read more → -
ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
Unauthenticated remote code execution via CSV Agent prompt injection in Flowise.
Read more → -
ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires a user to open a crafted PDF file or visit a malicious page.
Read more → -
ZDI-26-623: Linux Kernel IPv6 Multicast Routing Use-After-Free Local Privilege Escalation Vulnerability
The issue is a use-after-free in the Linux kernel’s IPv6 multicast routing code.
Read more → -
ZDI-26-624: Backblaze Personal Computer Backup bzbackup Link Following Denial-of-Service Vulnerability
A local attacker can trigger a denial-of-service condition in Backblaze Personal Computer Backup.
Read more → -
ZDI-26-625: Backblaze Personal Computer Backup bzserv Link Following Denial-of-Service Vulnerability
A local attacker with low-privileged code execution can cause a denial-of-service in Backblaze Personal Computer Backup's bzserv component.
Read more → -
ZDI-26-626: Backblaze Personal Computer Backup bzfilelist Link Following Denial-of-Service Vulnerability
A local low-privileged attacker can trigger a denial-of-service via the bzfilelist link-following code.
Read more → -
ZDI-26-627: Backblaze Personal Computer Backup bztransmit Link Following Denial-of-Service Vulnerability
Local low-privileged code execution can trigger a denial-of-service in Backblaze Personal Computer Backup.
Read more → -
ZDI-26-628: Backblaze Personal Computer Backup bzreports Link Following Denial-of-Service Vulnerability
A local attacker with low-privileged code can cause a denial-of-service in Backblaze Personal Computer Backup.
Read more → -
CISA KEV — Adobe Commerce and Magento (CVE-2026-75650) +3 more
Four CVEs affecting Adobe Commerce/Magento, Microsoft Windows, and N-able N-central have been added to CISA’s KEV Catalog.
Read more → -
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
China-based AI firms have extracted billions of tokens from U.S. frontier AI models via industrial-scale knowledge distillation.
Read more → -
CareCam Pro IP Cameras
The affected CareCam Pro IP Cameras use a hard-coded bootloader credential.
Read more → -
ZDI-26-616: Koha Eval Code Injection Remote Code Execution Vulnerability
Authentication is required to exploit the remote code execution flaw in Koha. The advisory assigns a CVSS score of 8.8.
Read more → -
ZDI-26-617: Microsoft Windows MIDI Service Incorrect Permission Assignment Local Privilege Escalation Vulnerability
The advisory notes that the Windows MIDI Service has an incorrect permission assignment that enables local privilege escalation.
Read more → -
ZDI-26-618: Microsoft Windows UMPDDrvStretchBlt Improper Object Management Local Privilege Escalation Vulnerability
Improper object management in UMPDDrvStretchBlt can be leveraged for local privilege escalation.
Read more → -
ZDI-26-619: Microsoft Windows UMPDDrvStretchBltROP Improper Object Management Local Privilege Escalation Vulnerability
The UMPDDrvStretchBltROP driver in Microsoft Windows contains an improper object management flaw that enables local privilege escalation.
Read more → -
ZDI-26-620: Microsoft Windows UMPDDrvPlgBlt Improper Object Management Local Privilege Escalation Vulnerability
Improper object management in the UMPDDrvPlgBlt component can be leveraged for local privilege escalation.
Read more → -
ZDI-26-621: Microsoft Windows UMPDDrvRealizeBrush Improper Object Management Local Privilege Escalation Vulnerability
Improper object management in UMPDDrvRealizeBrush enables local privilege escalation on Windows.
Read more → -
ZDI-26-622: Microsoft Windows IKEv2 AES-GCM Decryption Integer Underflow Remote Code Execution Vulnerability
Exploitation requires Windows systems with IKEv2 AES-GCM IPsec configuration.
Read more → -
CISA KEV — Google Chromium V8 (CVE-2026-85046)
CISA added CVE-2026-85046, a type confusion vulnerability in Google Chromium V8, to its KEV catalog.
Read more → -
Pyramid Solutions NetStaX EtherNet/IP Stack
A large Class 3 explicit-message request can overflow the receive buffer, causing memory corruption or device crash.
Read more → -
IXON VPN Client
IXON VPN Client versions prior to 1.4.7 are vulnerable to CRLF injection that can lead to remote code execution with root or SYSTEM privileges.
Read more → -
Rockwell Automation ArmorStart LT
ArmorStart LT versions up to 2.001 are vulnerable to stored cross-site scripting.
Read more → -
Rockwell Automation ControlFLASH
ControlFLASH versions up to 15.07 grant write permissions to the Everyone group on the installation directory, enabling arbitrary code execution.
Read more → -
Tycon Systems TPDIN-Monitor-WEB3
Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and earlier are vulnerable. Tycon provides firmware v2.4.2 to remediate the issues.
Read more → -
OPCFoundation OPC UA LocalDiscoveryServer (LDS)
OPCFoundation OPC UA LocalDiscoveryServer installers earlier than version 1.04.420 are vulnerable to privilege escalation during installation.
Read more → -
Inductive Automation Ignition
Versions 8.1.53 and earlier of Inductive Automation Ignition allow any authenticated user to create projects because the default "Create Project Role(s)" setting is blank. The issue is resolved in version 8.1.54 and later.
Read more → -
Rockwell Automation 1756-ENBT Module
All versions of the Rockwell Automation 1756-ENBT module are vulnerable to a crafted CIP packet that can cause a crash.
Read more → -
Preparing for the Post-Quantum Era: A Call to Action
CISA and the G7 Cyber Security Working Group issue a call to begin transitioning to post-quantum cryptography.
Read more → -
CISA KEV — Sangoma Switchvox (CVE-2026-9586) +6 more
CISA added seven actively exploited CVEs to its KEV catalog, covering Switchvox, Starlette, Kestra OSS, BerriAI LiteLLM, JFrog Artifactory, and SonicWall SMA1000 appliances.
Read more → -
Communicating Under Pressure: Best Practices for Service Providers
The advisory offers communication best-practice guidance for service providers during IT and OT outages.
Read more → -
Rockwell Automation FactoryTalk Activation Manager
FactoryTalk Activation Manager versions 5.02 and earlier are vulnerable to privilege escalation via installer console windows.
Read more → -
Rockwell Automation Redundancy Module Configuration Tool
The advisory identifies a DLL search-path permission issue in Rockwell Automation’s Redundancy Module Configuration Tool versions 9.00.00 through 10.00.00.
Read more → -
Rockwell Automation Logix Platform
The advisory lists specific Logix firmware versions that are vulnerable to a denial-of-service condition. Exploitation can cause a major nonrecoverable fault requiring a power cycle.
Read more → -
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
ControlLogix, CompactLogix, GuardLogix and Compact GuardLogix controllers with firmware below 34.015 (and related patch levels) are vulnerable to a denial-of-service condition. The flaw can trigger a major non-recoverable fault that requires a program download or a stage-2 reset to recover.
Read more → -
Rockwell Automation Historian ME
Series B 5.202 and Series C 7.101 of Rockwell Automation Historian ME are listed as vulnerable.
Read more → -
Rockwell Automation RSLinx Classic
RSLinx Classic versions up to 4.50 are vulnerable to denial-of-service via malformed CIP packets.
Read more → -
CISA KEV — PaperCut NG/MF (CVE-2026-81578) +1 more
PaperCut NG/MF is listed with two KEV vulnerabilities (CVE-2026-81578 and CVE-2026-82078).
Read more → -
ZDI-26-611: (0Day) pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a malicious webpage.
Read more → -
ZDI-26-612: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a page hosting one.
Read more → -
ZDI-26-613: (0Day) pdfforge PDF Architect PDF File Parsing Memory Corruption Remote Code Execution Vulnerability
The advisory reports a memory-corruption flaw in PDF Architect’s PDF parsing that can lead to remote code execution.
Read more → -
ZDI-26-614: (0Day) pdfforge PDF Architect PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a malicious web page.
Read more → -
ZDI-26-615: (0Day) pdfforge PDF Architect activation-service Update Service Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
An uncontrolled search path element in PDF Architect's activation-service Update Service enables local privilege escalation.
Read more → -
CISA KEV — ownCloud (CVE-2023-49105) +2 more
CISA added CVE-2023-49105 (ownCloud), CVE-2026-53362 (Linux kernel) and CVE-2026-66384 (JFrog Artifactory) to the KEV Catalog.
Read more → -
Mitsubishi Electric CNC Series (Update A)
The advisory lists multiple Mitsubishi Electric CNC models (Update A) as vulnerable to CVE-2025-2399. Exploitation may cause an out-of-bounds read leading to denial-of-service.
Read more → -
Xiiaozet LK100W
Xiiaozet LK100W devices with firmware earlier than 2.1.240 are vulnerable to OS command injection and unauthenticated management functions.
Read more → -
Rockwell Automation OTTO Fleet Manager
OTTO Fleet Manager versions up to 2.36.2 use a low bcrypt work factor, easing offline password-hash cracking.
Read more →
Page 3 of 12 · 1,153 advisories