Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability
The flaw is an integer overflow in GIMP's SGI file parser that requires the victim to open a crafted file or page.
Read more → -
ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires a user to open a crafted TIF file or view it via a malicious web page. The vulnerability is a heap-based buffer overflow in GIMP’s TIF parser.
Read more → -
ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
GIMP’s TIF file parser contains an integer overflow that can be triggered by a crafted TIF file, leading to remote code execution. Exploitation requires the victim to open the malicious file or load a page hosting it.
Read more → -
ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires a user to open a crafted APNG file or visit a page delivering it.
Read more → -
ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires a victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires a user to open a malicious OGG file or visit a crafted page.
Read more → -
ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
GStreamer’s PNG parser suffers a heap-based buffer overflow.
Read more → -
ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability
The advisory notes a use-after-free in GStreamer’s rtpsbcdepay element that can be remotely triggered.
Read more → -
ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data in Aeon's load_rehab_pile_dataset function, requiring the victim to load a malicious page or file.
Read more → -
ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
Remote code execution is possible if a user visits a malicious page or opens a malicious file while using aeon.
Read more → -
ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
Exploitation requires the victim to load a malicious page or file. The flaw permits remote code execution with a CVSS score of 7.8.
Read more → -
ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability
The exploit requires a malicious Bluetooth device to be paired before information disclosure can occur.
Read more → -
ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
Unauthenticated attackers on the same network can trigger a buffer overflow via the RTSP SETUP command.
Read more → -
ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability
Physically present attackers can exploit the vulnerability without authentication. The advisory assigns a CVSS score of 3.9.
Read more → -
ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability
Exploitation requires a successful Bluetooth pairing before the heap overflow can be triggered.
Read more → -
ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
The heap-based buffer overflow resides in the AVRCP_Br_Response_Parser of the Sony XAV-9500ES. Exploitation requires a Bluetooth device to be paired with the unit.
Read more → -
ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability
Physical attackers can bypass authorization on Sony XAV-9500ES devices via the udev USB rules.
Read more → -
ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability
The advisory reports a local privilege escalation via command injection in the crash dump handler of Sony XAV-9500ES.
Read more → -
ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability
Adminer installations are vulnerable to remote code execution due to an incorrect check of the multi_query function’s return value.
Read more → -
ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability
Authentication is required to exploit the uploadJar directory traversal RCE in Heimdall Data Database Proxy.
Read more → -
ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability
OSNEXUS QuantaStor can be remotely compromised without authentication.
Read more → -
ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability
Remote attackers can gain higher privileges on Progress Software Kemp LoadMaster after authenticating.
Read more → -
ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability
Remote authenticated attackers can gain higher privileges on Kemp LoadMaster due to a hard-coded cryptographic key.
Read more → -
ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability
Exploitation of the NoMachine getstat command requires authentication.
Read more → -
ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability
Unauthenticated code execution is possible via the firmware update link on Kenwood DNR1007XR devices.
Read more → -
ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability
The advisory reports a command injection in JKGenService that enables local privilege escalation on Kenwood DNR1007XR devices.
Read more → -
ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability
Unauthenticated physically present attackers can achieve arbitrary code execution on Kenwood DNR1007XR devices.
Read more → -
igloohome Smart Lock Mobile Application
Version 3.2.3 and earlier of the igloohome Smart Lock Mobile Application for Android contain source code that includes sensitive information, potentially allowing unauthorized access to backend services.
Read more → -
ABB KNX Update Tool
ABB KNX Update Tool versions ≤ 2.0.175 lack firmware integrity checks and can be rendered unusable via physical bus access.
Read more → -
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
The advisory lists dozens of CVEs affecting the GNU/Linux subsystem of firmware V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP.
Read more → -
Siemens Desigo CC
Siemens Desigo CC V7, V8, and V9 versions prior to 9.0.1 are vulnerable to CVE-2025-15467.
Read more → -
Siemens SIMATIC S7-PLCSIM Advanced
The vulnerability allows an unauthenticated attacker on the local network to cause a denial-of-service condition via high-volume multicast traffic. Siemens is preparing fix versions and recommends mitigation steps.
Read more → -
MikroTik RouterOS and Cloud Hosted Router
All MikroTik RouterOS and Cloud Hosted Router versions are affected by CVE-2026-16347, which permits rapid password guessing due to missing rate-limiting.
Read more → -
Siemens Mendix Runtime
Developers may unintentionally grant the anonymous role access to all System.User records. This can expose sensitive user data or enable privilege escalation.
Read more → -
CI Fortify – Advice for isolating vital systems
The guidance advises critical infrastructure organizations to isolate vital operational technology and enabling systems from all other networks during disruptions.
Read more → -
CISA KEV — Fortinet FortiOS (CVE-2025-68686) +1 more
Fortinet FortiOS and Arista VeloCloud Orchestrator on-prem have been added to CISA’s KEV catalog due to active exploitation. The advisory advises rapid remediation for publicly exposed assets.
Read more → -
Panduit IntraVUE
IntraVUE versions up to 3.2.1a14 store passwords in cleartext via the API. The same versions also allow an attacker to act as an active proxy, bypassing OT segmentation.
Read more → -
Johnson Controls C-CURE 9000 and Victor application server
Versions of C-CURE 9000 and Victor up to v2.90_v3.0 (and Victor Web up to v7.1) are vulnerable to unauthenticated remote code execution. The flaw can be triggered from an adjacent network and affect physical-security workstations.
Read more → -
MZ Automation lib60870
Versions of MZ Automation lib60870 up to 2.4.0 are vulnerable to an out-of-bounds read that can cause a denial-of-service. The vendor recommends updating to 2.4.1 or later.
Read more → -
MZ Automation libIEC61850
libIEC61850 versions 1.0.0 through 1.6.1 are affected by stack- and heap-based buffer overflows. The advisory advises updating to the latest build.
Read more → -
Johnson Controls XAAP Android
Versions of the Johnson Controls XAAP Android app prior to 1.53 store data in cleartext on the device.
Read more → -
Weintek cMT3092X
Versions of the cMT3092X firmware earlier than 20210218 and EasyWeb earlier than v2.1.20 are vulnerable to privilege escalation via cookie manipulation.
Read more → -
Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
The advisory notes a view-based exploit in Zimbra Collaboration Suite that can exfiltrate recent email and address data when a malicious email is viewed.
Read more → -
ZDI-26-447: Heimdall Data Database Proxy generateFileContent CRLF Injection Remote Code Execution Vulnerability
Remote code execution is possible via a CRLF injection in generateFileContent, but authentication is required. The advisory assigns a CVSS score of 7.2.
Read more → -
ZDI-26-448: Bitdefender Total Security Shredder Link Following Local Privilege Escalation Vulnerability
The vulnerability enables privilege escalation from a low-privileged process on Bitdefender Total Security.
Read more → -
ZDI-26-449: AzeoTech DAQFactory CTL File Parsing Type Confusion Remote Code Execution Vulnerability
Exploitation requires a victim to load a malicious CTL file via a web page or local file.
Read more → -
ZDI-26-450: AzeoTech DAQFactory CTL File Parsing Use-After-Free Remote Code Execution Vulnerability
Exploitation requires a victim to open a crafted CTL file or visit a malicious page, triggering a use-after-free.
Read more → -
ZDI-26-451: Docker Desktop for macOS Inference Server Permissive Allow List Sandbox Escape Vulnerability
Docker Desktop for macOS's model runner sandbox can be escaped by a local attacker who already has low-privileged code execution inside the sandbox.
Read more → -
ZDI-26-452: Dify AI Workflow oauth_redirect_url Open Redirect Vulnerability
The vulnerability is an open redirect in Dify’s oauth_redirect_url parameter.
Read more → -
CISA KEV — Check Point SmartConsole (CVE-2026-16232) +1 more
Check Point SmartConsole and Microsoft SharePoint have been added to the KEV catalog due to active exploitation.
Read more → -
2026-009: Critical Vulnerability in Microsoft SharePoint
Microsoft SharePoint Server is affected by a critical remote code execution vulnerability. Proof-of-concept exploit code and successful attacks have been reported.
Read more → -
Rockwell Automation ThinManager
ThinManager versions prior to 13.0.8, 13.1.6, 13.2.5, and 14.0.3 are vulnerable to an authenticated path-traversal flaw.
Read more → -
Siemens Opcenter X
Siemens Opcenter X versions prior to V2604 are vulnerable to an authentication bypass via JWT header manipulation.
Read more → -
Rockwell Automation FactoryTalk Services Platform
FactoryTalk Directory (FTSP) version 6.60 is affected by a JWT signature validation bypass. The flaw enables impersonation of any authorized user on the FTSP server.
Read more → -
Siemens CADRA
CADRA versions earlier than V2511 are vulnerable to multiple high-severity zlib and Foxit flaws.
Read more → -
Rockwell Automation Studio 5000 Logix Designer
Versions V32.00 through V36.00 of Rockwell Automation Studio 5000 Logix Designer are listed as vulnerable. The advisory cites a path-traversal flaw that can lead to arbitrary file writes.
Read more → -
Rockwell Automation 1718-AENTR/1719-AENTR
Rockwell Automation 1718/1719 Ex I/O version 3.011 is vulnerable to a denial-of-service condition caused by a UDP unicast network storm.
Read more → -
Rockwell Automation 1734 POINT I/O
The 1734 POINT I/O module (v3.023) can be forced into a faulted state by crafted CIP messages, causing a denial-of-service.
Read more → -
Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW
All versions of the Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFW are affected by PAN-OS vulnerabilities. The advisory directs customers to apply the workarounds published by Palo Alto Networks.
Read more → -
Siemens IAM Client
The advisory lists specific Siemens product versions vulnerable to an untrusted search path issue that could enable local privilege escalation. Siemens provides updated IAM Client versions for the affected products.
Read more → -
Siemens SIDIS Secured SmartPlug
Versions of Siemens SIDIS Secured SmartPlug earlier than V7.26.0310 are affected by multiple high-severity vulnerabilities.
Read more → -
Tycon Systems TPDIN-Monitor-WEB2
TPDIN-Monitor-WEB2 version 2.3.9 permits authentication bypass by submitting empty credentials.
Read more → -
CISA KEV — DD-WRT (CVE-2021-27137) +3 more
CISA added four actively exploited CVEs—including two WordPress core flaws—to its KEV Catalog.
Read more → -
ZDI-26-445: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation via incorrect authorization in Windows WMI providers.
Read more → -
ZDI-26-446: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation via incorrect authorization in Windows WMI providers.
Read more → -
CISA KEV — Fortinet FortiSandbox (CVE-2026-25089) +2 more
Two FortiSandbox OS command injection flaws and a SharePoint deserialization flaw have been added to the KEV catalog.
Read more → -
Rockwell Automation 1756-EN2, 1756-EN3, and 1756-ENBT
The advisory reports that crafted CIP Implicit Connection packets can cause a denial-of-service condition on the affected modules. Rockwell Automation provides firmware updates for EN2 and EN3 but none for ENBT.
Read more → -
AutomationDirect Productivity Suite
AutomationDirect Productivity Suite versions up to 4.6.2.2 are listed as affected.
Read more → -
Rockwell Automation Arena
Arena versions up to V17.00.00 are vulnerable to out-of-bounds write flaws that could allow arbitrary code execution.
Read more → -
NASA Core Flight System (cFS) Health & Safety (HS) Application
The HS application can crash on a routine Housekeeping Telemetry request, causing denial of service. Versions prior to 7.0.1 are affected.
Read more → -
Rockwell Automation FactoryTalk DataMosaix
FactoryTalk DataMosaix Private Cloud versions up to 8.02 are vulnerable to a stored cross-site scripting issue. An authenticated attacker could inject scripts that execute when other users view workflow pages.
Read more → -
SALTO ProAccess Space
Versions of SALTO ProAccess Space prior to 6.13 are vulnerable when the tenancy (partition) feature is enabled.
Read more → -
Siemens SICAM 8
Siemens SICAM 8 firmware versions prior to 26.20 (CPCI85) and 26.20.0 (SICORE) are vulnerable to denial-of-service via an authenticated HTTP debug interface.
Read more → -
Rockwell Automation Flex 5000 Adapter
Flex 5000 Adapter version 6.011 is vulnerable to a denial-of-service via crafted CIP packets.
Read more → -
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix
Rockwell Automation CompactLogix, ControlLogix, Compact GuardLogix and GuardLogix controllers are vulnerable to denial-of-service conditions. The vulnerability affects firmware versions up to V35.015 for several model families.
Read more → -
CISA KEV — KNX Association KNX Protocol Connection Authorization (CVE-2023-4346) +1 more
CISA added CVE-2023-4346 (KNX protocol) and CVE-2026-46817 (Oracle E-Business Suite) to the KEV catalog. Both are identified as actively exploited.
Read more → -
Establishing a Coordinated Vulnerability Disclosure Program to Work With Security Researchers
The guidance is aimed at software manufacturers and online service providers.
Read more → -
ZDI-26-444: 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability
Heap-based buffer overflow in 7-Zip’s XZ decompression can lead to remote code execution when a crafted file is opened.
Read more → -
ZDI-26-405: X.Org Server GLX Extension Use-After-Free Privilege Escalation Vulnerability
The GLX extension in X.Org Server contains a use-after-free that enables local privilege escalation.
Read more → -
ZDI-26-406: X.Org Server BitmapScaleBitmaps Integer Overflow Privilege Escalation Vulnerability
An integer overflow in the BitmapScaleBitmaps function of X.Org Server can be leveraged for local privilege escalation.
Read more → -
ZDI-26-407: X.Org Server PCF Font Parsing Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server's PCF font parser enables local privilege escalation.
Read more → -
ZDI-26-408: X.Org Server ComputeScaledProperties Heap-based Buffer Overflow Privilege Escalation Vulnerability
The advisory notes a heap-based buffer overflow in ComputeScaledProperties of X.Org Server that enables local privilege escalation.
Read more → -
ZDI-26-409: X.Org Server Glamor Font Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in Glamor font handling of X.Org Server enables local privilege escalation.
Read more → -
ZDI-26-410: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to visit a malicious page or open a malicious file.
Read more → -
ZDI-26-411: NVIDIA NVTabular Pickle File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
NVTabular deserializes untrusted pickle files, enabling remote code execution when a user opens a malicious file or visits a crafted page.
Read more → -
ZDI-26-412: (Pwn2Own) Microsoft SharePoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Unauthenticated remote code execution via SharePoint deserialization.
Read more → -
ZDI-26-413: (Pwn2Own) Microsoft SharePoint Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
Unauthenticated remote code execution is possible on Microsoft SharePoint via improper verification of cryptographic signatures.
Read more → -
ZDI-26-414: Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability
PowerShell’s help system can be traversed to achieve remote code execution when a user opens a malicious file or visits a malicious page.
Read more → -
ZDI-26-415: Microsoft Windows WMI Providers Incorrect Authorization Local Privilege Escalation Vulnerability
The advisory notes an incorrect authorization issue in Windows WMI providers that enables local privilege escalation.
Read more → -
ZDI-26-416: Microsoft Hyper-V netvsc Out-Of-Bounds Read Local Privilege Escalation Vulnerability
The netvsc driver contains an out-of-bounds read that can be leveraged for local privilege escalation.
Read more → -
ZDI-26-417: Microsoft Windows ServerManager Exposed Dangerous Method Local Privilege Escalation Vulnerability
The advisory describes a local privilege escalation vulnerability in Microsoft Windows Server.
Read more → -
ZDI-26-418: Microsoft SharePoint SPFieldMultiLineText Cross-Site Scripting Vulnerability
The advisory notes that SharePoint's SPFieldMultiLineText component is vulnerable to XSS that can be triggered by a malicious page or file.
Read more → -
ZDI-26-419: Adobe Creative Cloud AdobeUpdateService Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation via an uncontrolled search path element in AdobeUpdateService.
Read more → -
ZDI-26-420: Adobe Creative Cloud AGSService Incorrect Permission Assignment Local Privilege Escalation Vulnerability
The advisory notes that AGSService assigns incorrect permissions, allowing local privilege escalation.
Read more → -
ZDI-26-421: Cisco Identity Services Engine validFileNameOrPath Directory Traversal Information Disclosure Vulnerability
Remote authenticated attackers can exploit a directory traversal to disclose files on Cisco Identity Services Engine.
Read more → -
ZDI-26-422: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability
Remote code execution is possible via numeric truncation in Samsung rlottie.
Read more → -
ZDI-26-423: Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability
Unauthenticated network-adjacent attackers can trigger remote code execution via the MailPlus Redis component on Synology DiskStation DS925+.
Read more → -
ZDI-26-424: Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability
Unauthenticated network-adjacent attackers can connect to the Redis service on DS925+ devices.
Read more → -
ZDI-26-425: OpenSSL OCSP Stapling Verification Double Free Remote Code Execution Vulnerability
OpenSSL’s OCSP stapling verification contains a double-free bug that can be triggered by a malicious server response.
Read more →
Page 6 of 12 · 1,153 advisories