Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
Ebyte NA111-M
The NA111-M firmware 9013-2-17 is listed as affected by multiple high-severity CVEs.
Read more → -
All-Line Equipment Company Fuel-Boss
Fuel-Boss V1 products running PHP 7.1.5 are vulnerable to remote command execution via crafted IMAP server names.
Read more → -
Applied Systems Engineering ASE2000 V2 Communications Test Set
ASE2000 V2 Communications Test Set versions 2.25-2.37 are vulnerable to XML external entity attacks and improper TLS certificate validation. The vendor recommends upgrading to version 2.38.
Read more → -
Mitsubishi Electric Multiple FA Products (Update D)
A crafted UDP packet can cause denial-of-service, timeout, or communication delay on Mitsubishi CC-Link IE TSN Remote I/O modules version ≤ 09.
Read more → -
CISA KEV — Red Hat Libuser (CVE-2015-3246) +5 more
CISA added six actively exploited CVEs to its KEV Catalog, including a Citrix NetScaler ADC buffer vulnerability.
Read more → -
CISA Vulnerability Review
CISA notes that most compromises stem from exposed, well-known software flaws rather than advanced techniques. It advises using the BOD 26-04 risk-based framework to prioritize remediation.
Read more → -
Bendix EC80 Brake ECU
A stack-based buffer overflow in the Bendix EC80 Brake ECU could allow remote code execution on the CAN bus.
Read more → -
FURUNO FA-50 Class B AIS Transponder
All versions of the FURUNO FA-50 Class B AIS Transponder are affected by hard-coded credentials and missing authentication for critical functions.
Read more → -
Siemens SIMATIC IoT2050 Advanced
Unauthenticated attackers can create malicious Node-RED flows via the HTTP interface. Siemens recommends updating to firmware version 4.3.4.1 or later.
Read more → -
Zoneminder
An authenticated user with View Events permission can exploit an OS command injection via the exportFile parameter.
Read more → -
PayRange API
All versions of the PayRange API are missing proper authorization on management endpoints. This permits unauthenticated disclosure, modification, or denial-of-service of device data.
Read more → -
Rently Smart Home
Rently Smart Home versions up to 20.1.0 are affected by CVE-2026-75960, an insufficiently protected credentials flaw.
Read more → -
Ebyte NE2-D11
The NE2-D11 firmware FW-9167-0-11 does not enforce authentication on its web management interface.
Read more → -
CISA KEV — Gitea (CVE-2026-60004)
CVE-2026-60004, a code injection flaw in Gitea, has been added to CISA’s KEV catalog.
Read more → -
A Tale of Two SOCs: Insights From Two Red Team Assessments
CISA conducted red team assessments at two organizations, observing different defensive outcomes. One organization failed to detect or contain the red team's activity, while the other rapidly identified and isolated initial compromise attempts.
Read more → -
CISA KEV — Oracle HTTP Server and Oracle Weblogic (CVE-2026-21962)
CISA added CVE-2026-21962, an improper access-control flaw in Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in, to the KEV catalog. The vulnerability is being actively exploited.
Read more → -
ZDI-26-589: BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires pairing a malicious Bluetooth device with the target system.
Read more → -
ZDI-26-590: libwebsockets HTTP/2 HPACK Path Header Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Remote unauthenticated attackers can trigger an out-of-bounds write in libwebsockets' HTTP/2 HPACK path header parsing.
Read more → -
ZDI-26-591: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
TensorRT's ONNX parser has a heap-based buffer overflow that can be triggered by a crafted ONNX file.
Read more → -
ZDI-26-592: NVIDIA TensorRT ONNX File Parsing Improper Validation of Array Index Remote Code Execution Vulnerability
TensorRT's ONNX parser does not properly validate array indices, enabling remote code execution.
Read more → -
ZDI-26-593: NVIDIA TensorRT ONNX File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
TensorRT's ONNX parser suffers a heap-based buffer overflow that can be triggered by a crafted ONNX model.
Read more → -
ZDI-26-594: NVIDIA Megatron Bridge load_model_config Code Injection Remote Code Execution Vulnerability
Remote code execution requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-595: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
The use-after-free occurs in Foxit PDF Reader's annotation handling and requires the victim to open a crafted PDF or visit a malicious page.
Read more → -
ZDI-26-596: Foxit PDF Reader PDF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
An out-of-bounds read in Foxit PDF Reader can disclose information when a user opens a crafted PDF or visits a malicious page.
Read more → -
ZDI-26-597: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious PDF file or load a malicious web page.
Read more → -
ZDI-26-598: Foxit PDF Reader AcroForm Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious web page.
Read more → -
ZDI-26-599: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
The advisory notes a use-after-free in Foxit PDF Reader’s annotation handling that can disclose information.
Read more → -
ZDI-26-600: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
Exploitation requires the victim to open a crafted PDF or visit a malicious page, leading to information disclosure.
Read more → -
ZDI-26-601: Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability
A use-after-free in Foxit PDF Reader’s annotation handling can disclose sensitive information.
Read more → -
ZDI-26-602: Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the user to open a malicious PDF file or visit a malicious web page.
Read more → -
ZDI-26-603: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Foxit PDF Reader’s annotation handling.
Read more → -
ZDI-26-604: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF file or visit a malicious web page.
Read more → -
ZDI-26-605: Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability
Remote attackers can disclose NTLM response data after a user visits a malicious page or opens a malicious file.
Read more → -
ZDI-26-606: Microsoft Windows Compatibility Appraiser Link Following Local Privilege Escalation Vulnerability
Exploitation requires prior code execution as LOCAL SERVICE before privilege escalation.
Read more → -
ZDI-26-607: Microsoft Office HTML Injection Information Disclosure Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page, leading to information disclosure.
Read more → -
ZDI-26-608: Linux Kernel KVM IOAPIC Use-After-Free Local Privilege Escalation Vulnerability
The issue is a use-after-free in the KVM IOAPIC component of the Linux kernel.
Read more → -
ZDI-26-609: Linux Kernel Net Scheduler Packet Classifier Use-After-Free Local Privilege Escalation Vulnerability
The vulnerability is a use-after-free in the Linux kernel net scheduler packet classifier. Exploitation requires prior low-privileged code execution.
Read more → -
ZDI-26-610: Apple Safari JavaScriptCore B3 ReduceStrength Phase Use-After-Free Remote Code Execution Vulnerability
Safari's JavaScriptCore contains a use-after-free in the B3 ReduceStrength phase. Exploitation requires the victim to load a malicious page or file.
Read more → -
ZDI-26-585: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
A crafted OGWU file can trigger an out-of-bounds write in OriginLab Origin Viewer, enabling remote code execution.
Read more → -
ZDI-26-586: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious OGM file or visit a crafted web page.
Read more → -
ZDI-26-587: Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability
Fabric.js's loadFromJSON function can be abused for server-side request forgery, resulting in sensitive data disclosure.
Read more → -
CISA KEV — Zimbra Collaboration Suite (ZCS) (CVE-2026-73570)
CISA added CVE-2026-73570, an OS command injection in Zimbra Collaboration Suite, to the KEV catalog.
Read more → -
CISA KEV — TrueConf Server (CVE-2026-72529) +1 more
CISA added CVE-2026-72529 and CVE-2026-72530 to its KEV Catalog due to evidence of active exploitation. These vulnerabilities affect TrueConf Server.
Read more → -
Johnson Controls Simplex Incident Manager
Simplex Incident Manager versions up to V2.01 store user credentials in cleartext memory.
Read more → -
2026-010: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway
Citrix NetScaler ADC and NetScaler Gateway have multiple vulnerabilities. CERT-EU recommends updating them promptly.
Read more → -
CISA KEV — MLflow (CVE-2026-64849)
CVE-2026-64849, an SSRF flaw in MLflow, has been added to CISA’s KEV catalog due to active exploitation.
Read more → -
Defending Against an Active Threat to Siemens S7 Series PLCs
The advisory details an active cyber threat targeting Siemens S7 Series programmable logic controllers (PLCs). Malicious individuals are using AI-generated scripts disguised as monitoring tools to scan for vulnerable PLCs.
Read more → -
CISA KEV — Microsoft Internet Key Exchange (IKE) Service (CVE-2026-33824) +3 more
Four CVEs affecting Microsoft IKE, SharePoint, Broadcom VMware vCenter, and Apple macOS have been added to CISA’s KEV catalog.
Read more → -
CISA Malcolm
Versions of Malcolm prior to 26.07.0 allow unbounded archive extraction, which can exhaust filesystem resources and cause denial of service.
Read more → -
Siemens Simcenter Nastran
Simcenter Nastran and Simcenter Femap versions earlier than V2606 are vulnerable to CVE-2026-59086.
Read more → -
CISA Adds One Known Exploited Vulnerability to Catalog
CISA added CVE-2025-62593, a Ray Project vulnerability, to its KEV Catalog due to evidence of active exploitation. The advisory references Binding Operational Directive (BOD) 26-04, which requires FCEB agencies to prioritize remediation of high-risk vulnerabilities.
Read more → -
Hitachi Energy APM Edge Product
Hitachi Energy's APM Edge product versions 6.10 and earlier are affected by Dirty Frag vulnerabilities. These vulnerabilities could allow a local, unprivileged user to escalate privileges to root.
Read more → -
AVEVA Enterprise SCADA
Authenticated users with DNA Authority – Operator privilege can modify serialized data, potentially leading to code execution. The issue affects AVEVA Enterprise SCADA versions from 2021 SP2 P5 through 2025.
Read more → -
Haiwell IoT Cloud HMI Gateway
Haiwell IoT Cloud HMI Gateway version 3.40.1.12 is vulnerable to OS command injection via the /setting endpoint.
Read more → -
Siemens Simcenter Femap
Simcenter Femap versions earlier than V2606.0001 are vulnerable to out-of-bounds reads in BMP parsing.
Read more → -
Siemens Solid Edge
Solid Edge versions prior to V225.0.15 and V226.0.7 contain file-parsing bugs that may allow code execution when opening crafted PAR, PSM, or DFT files. Siemens advises updating to the latest releases to remediate the issue.
Read more → -
ANDRITZ HIPASE-250 and 250 SCALA
HIPASE-250 and 250 SCALA versions up to 7.20 store passwords in a reversible format.
Read more → -
Siemens LOGO! Soft Comfort
LOGO! Soft Comfort versions earlier than 9 use a hard-coded AES master key and unsalted password hashes.
Read more → -
Flow Neuroscience FL-100
The Flow Neuroscience FL-100 devices contain a hard-coded credential that bypasses authentication over Bluetooth. Firmware updates are available through the Flow app to remediate the issue.
Read more → -
Siemens Siveillance Video
Siemens Siveillance Video Management Servers are affected by an OS Command Injection vulnerability. The advisory states that this could allow a Remote Code Execution attack.
Read more → -
Johnson Controls Metasys
Metasys versions 12-15 are vulnerable to a persistent cross-site scripting flaw (CVE-2026-34491). The flaw allows a low-privilege user to inject a payload that runs in other users' sessions.
Read more → -
Johnson Controls Inc. Airwall
Airwall versions up to 4.0.4 contain a hard-coded cryptographic key that can decrypt stored configuration data.
Read more → -
Siemens Desigo DXR and PXC Controllers
Malformed BACnet packets can trigger a denial-of-service condition on Siemens Desigo DXR and PXC controllers.
Read more → -
Siemens License Server (SLS)
Versions of Siemens License Server earlier than 5.1 and 5.3 are vulnerable to privilege escalation and path-traversal flaws.
Read more → -
Siemens Parasolid
Parasolid versions earlier than V38.0.235 and V38.1.230 are vulnerable to an out-of-bounds read in X_T file parsing.
Read more → -
ZDI-26-568: Linux Kernel Net Scheduler Race Condition Local Privilege Escalation Vulnerability
A race condition in the Linux kernel net scheduler can be leveraged for local privilege escalation. CVSS is rated 7.5.
Read more → -
ZDI-26-569: Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability
A race condition in the Linux kernel’s Net Scheduler True Link Equalizer can be used for local privilege escalation.
Read more → -
ZDI-26-570: Linux Kernel IGMP Subsystem Race Condition Local Privilege Escalation Vulnerability
The advisory identifies a race condition in the Linux kernel's IGMP subsystem that can be used for local privilege escalation.
Read more → -
ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability
The flaw is a use-after-free in the Linux kernel’s Net Scheduler packet classifier API. It enables local privilege escalation after low-privilege code execution.
Read more → -
ZDI-26-572: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
The advisory notes a race condition in the Linux kernel XFRM subsystem that can be leveraged for local privilege escalation.
Read more → -
ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability
An out-of-bounds read in ksmbd response header handling can disclose information without authentication.
Read more → -
ZDI-26-574: Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability
The issue is a race condition in the Linux kernel net scheduler connection tracking code. It enables local privilege escalation.
Read more → -
ZDI-26-575: Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The vulnerability is a local TOCTOU privilege escalation in the Linux kernel's Net Scheduler packet classifier API.
Read more → -
ZDI-26-576: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
The advisory notes a race condition in the Linux kernel's XFRM subsystem that can be exploited for local privilege escalation.
Read more → -
ZDI-26-577: Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Trend Micro VPN contains an uncontrolled OpenSSL search path element that enables local privilege escalation.
Read more → -
ZDI-26-578: NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
The advisory notes an integer underflow in the NGINX HTTP Dav module’s alias directive.
Read more → -
ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability
Exploitation requires valid authentication and leverages a directory traversal in the zipFiles component.
Read more → -
ZDI-26-580: Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability
Authentication is not required to retrieve sensitive information from Cisco Identity Services Engine.
Read more → -
ZDI-26-581: Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability
Remote code execution is possible via an authenticated invokeScript command injection.
Read more → -
ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability
Remote authenticated attackers can exploit a directory traversal in PatchUpdateListener to disclose sensitive information.
Read more → -
ZDI-26-583: Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability
Clam AntiVirus 7z archive parsing contains an integer overflow that can be remotely triggered.
Read more → -
ZDI-26-584: dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability
dnsmasq can enter an infinite loop while processing DNSSEC NSEC/NSEC3 type bitmap, causing a denial of service.
Read more → -
ZDI-26-564: NVIDIA Transformers4Rec load_model_trainer_states_from_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data in Transformers4Rec's load_model_trainer_states_from_checkpoint function.
Read more → -
ZDI-26-565: Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
Local privilege escalation in Gen Digital CCleaner (CVE-2026-12410) with CVSS 7.8.
Read more → -
ZDI-26-566: BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious web page.
Read more → -
ZDI-26-567: Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability
The vulnerability enables local privilege escalation via the NortonUtilitiesSvc component.
Read more → -
Siemens RUGGEDCOM APE1808
Siemens RUGGEDCOM APE1808 devices that include a Fortinet NGFW are listed as affected by cross-site scripting (CVE-2026-23573) and path-traversal (CVE-2026-59839) vulnerabilities.
Read more → -
ZDI-26-557: (Pwn2Own) Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability
Unauthenticated network-adjacent attackers can retrieve sensitive information from Amazon Smart Plug devices.
Read more → -
ZDI-26-558: (Pwn2Own) Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability
Network-adjacent attackers can bypass certificate validation for OTA updates on Amazon Smart Plug.
Read more → -
ZDI-26-559: (Pwn2Own) Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability
Unauthenticated attackers on the same network can trigger an out-of-bounds write via the OTA update process.
Read more → -
ZDI-26-560: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
The vulnerability enables remote code execution after an attacker reaches the localhost interface.
Read more → -
ZDI-26-561: (Pwn2Own) Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
The Home Assistant Green device is vulnerable to command injection. This allows for remote code execution.
Read more → -
ZDI-26-562: (Pwn2Own) Home Assistant Green mDNS Server-Side Request Forgery Vulnerability
Home Assistant Green's mDNS server-side request forgery vulnerability allows network-adjacent attackers to initiate arbitrary server-side requests. Authentication is not required.
Read more → -
ZDI-26-563: (Pwn2Own) Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability
Unauthenticated network-adjacent attackers can trigger arbitrary server-side requests via Home Assistant Green's Simple Service Discovery Protocol server.
Read more → -
CISA KEV — Cisco Secure Firewall Adaptive Security Appliance (CVE-2026-20349) +2 more
CISA added CVE-2026-20349 (Cisco ASA/FTD Heap Inspection Vulnerability), CVE-2026-68820 (Microsoft WinSock Use-After-Free Vulnerability), and CVE-2026-72898 (Metabase SQL Injection Vulnerability) to its KEV Catalog.
Read more → -
Pulsetto Vagus Nerve Stimulator
All versions of the Pulsetto Vagus Nerve Stimulator are affected by CVE-2026-18844.
Read more → -
Mira Hormone Monitor, Mira Android App
Mira Hormone Monitor firmware 1.7.1.47 and Mira Android App 4.5.15.4 are vulnerable to eight CVEs, including remote BLE authentication bypass.
Read more → -
ZDI-26-542: Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability
Local attackers can exploit an improper object management flaw in UMPDDrvBitBlt to gain higher privileges.
Read more → -
ZDI-26-543: Microsoft Windows ICC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires interaction with the Mscms.dll color management library.
Read more →
Page 4 of 12 · 1,153 advisories