Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-426: OpenSSL X.509 Email Validation Out-Of-Bounds Read Information Disclosure Vulnerability
The advisory notes an out-of-bounds read in OpenSSL’s X.509 email validation that can disclose information without authentication.
Read more → -
ZDI-26-427: WatchGuard FireWare OS iked ike2_hmac Null Pointer Dereference Denial-of-Service Vulnerability
Unauthenticated remote attackers can trigger a null-pointer dereference in the iked ike2_hmac function, causing a denial-of-service on WatchGuard FireWare OS VPN IKEv2.
Read more → -
ZDI-26-428: WatchGuard FireWare OS admd Stack-based Buffer Overflow Remote Code Execution Vulnerability
The admd service in WatchGuard FireWare OS has a stack-based buffer overflow that can be exploited remotely without authentication.
Read more → -
ZDI-26-429: NVIDIA NeMo Framework Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to load a malicious page or file.
Read more → -
ZDI-26-430: MSI Center NTIOLib_X64 Origin Validation Error Local Privilege Escalation Vulnerability
The vulnerability is a local privilege escalation in MSI Center's NTIOLib_X64 component.
Read more → -
ZDI-26-432: G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation in G DATA Total Security (CVE-2026-13268).
Read more → -
ZDI-26-433: (Pwn2Own) Autel MaxiCharger AC Elite Home Software Update Improper Verification of Cryptographic Signature Arbitrary Code Execution Vulnerability
Physical access enables arbitrary code execution on Autel MaxiCharger AC Elite Home EV chargers.
Read more → -
ZDI-26-434: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Authentication Bypass Vulnerability
Physical attackers can bypass authentication on Autel MaxiCharger AC Elite Home EV chargers via USB.
Read more → -
ZDI-26-435: (Pwn2Own) Autel MaxiCharger AC Elite Home NFC Stack-based Buffer Overflow Arbitrary Code Execution Vulnerability
A stack-based buffer overflow in the charger’s NFC stack can be triggered by a physically present attacker to execute code. No authentication is required.
Read more → -
ZDI-26-436: (Pwn2Own) Autel MaxiCharger AC Elite Home USB Heap-based Buffer Overflow Arbitrary Code Execution Vulnerability
Unauthenticated physical attackers can trigger a heap-based buffer overflow on Autel MaxiCharger AC Elite Home EV chargers.
Read more → -
ZDI-26-437: (Pwn2Own) Autel MaxiCharger AC Elite Home WebSockets Integer Underflow Remote Code Execution Vulnerability
Unauthenticated remote code execution via an integer underflow in the charger’s WebSockets interface. The issue affects Autel MaxiCharger AC Elite Home EV chargers.
Read more → -
ZDI-26-438: Rockwell Automation Arena Simulation DOE File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
A crafted DOE file can cause an out-of-bounds write in Arena Simulation, enabling remote code execution after a user opens the file or visits a malicious page.
Read more → -
ZDI-26-439: Fuji Electric Tellus pcid64 Driver Exposed Dangerous Method Local Privilege Escalation Vulnerability
The advisory describes a local privilege escalation vulnerability in Fuji Electric Tellus pcid64 Driver. Attackers can escalate privileges after executing low-privileged code.
Read more → -
ZDI-26-440: Fuji Electric Tellus pcid64 Driver Untrusted Pointer Dereference Denial of Service Vulnerability
The pcid64 driver contains an untrusted pointer dereference that can cause a local denial-of-service.
Read more → -
ZDI-26-441: dnsmasq DNS Response Heap-based Buffer Overflow Remote Code Execution Vulnerability
dnsmasq contains a heap-based buffer overflow in DNS response handling that permits remote code execution without authentication.
Read more → -
ZDI-26-442: Linux Kernel CAN ISO-TP Protocol Race Condition Local Privilege Escalation Vulnerability
The advisory reports a race condition in the Linux kernel's CAN ISO-TP protocol implementation.
Read more → -
ZDI-26-443: Linux Kernel vmwgfx Integer Overflow Local Privilege Escalation Vulnerability
The issue is an integer overflow in the Linux kernel vmwgfx driver that enables local privilege escalation.
Read more → -
ZDI-26-404: Delta Electronics DTM Soft Project File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
CISA KEV — SonicWall SMA1000 Appliances (CVE-2026-15409) +3 more
SonicWall SMA1000 appliances are listed with both SSRF and code injection vulnerabilities in the KEV catalog.
Read more → -
CISA Urges SharePoint Hardening After New Exploitations
Active exploitation of CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164 is targeting on-premises SharePoint Server.
Read more → -
ABB Advant Master Online Builder
ABB Advant Master Online Builder versions up to 6.1.1-3 are vulnerable to CVE-2025-13162.
Read more → -
ABB Ability Edgenius
ABB Ability Edgenius versions 3.2.0.0 through 3.2.4.0 are vulnerable to CVE-2026-31431. An update to version 3.2.4.1 resolves the issue.
Read more → -
Rockwell Automation 1715-AENTR EtherNet/IP Adapter
Versions up to 3.003 of the Rockwell Automation 1715-AENTR EtherNet/IP Adapter are vulnerable. The device exposes an unauthenticated debug port.
Read more → -
ABB T-MAC Plus
ABB T-MAC Plus version 4.0-24 is affected; ABB provides an update to version 4.0-25 that resolves the vulnerabilities.
Read more → -
CISA KEV — Cisco IOS (CVE-2008-4128)
CVE-2008-4128, a cross-site request forgery flaw in Cisco IOS, has been added to CISA’s KEV Catalog. The advisory urges rapid remediation on publicly exposed assets that grant total control.
Read more → -
Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting
Russian FSB Center 16 actors are exploiting poorly configured and vulnerable networking devices worldwide.
Read more → -
CISA KEV — iCagenda (CVE-2026-48939) +1 more
CISA added CVE-2026-48939 and CVE-2026-56291 to its KEV Catalog. These vulnerabilities involve unrestricted file uploads with potentially harmful file types.
Read more → -
Schneider Electric Easergy MiCOM Px40 Series
The advisory states that hard-coded credentials in the SNMP protocol could allow unauthorized access to basic device identification.
Read more → -
OpenPLC v3
An authenticated attacker can write arbitrary files via a legacy web UI upload flaw, potentially leading to native code execution through the default compilation process.
Read more → -
Schneider Electric PowerChute Serial Shutdown
The advisory explicitly states that PowerChute Serial Shutdown versions 1.4 and prior are affected by multiple vulnerabilities, including path traversal and CRLF injection.
Read more → -
ZDI-26-398: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format String Remote Code Execution Vulnerability
Unauthenticated attackers on the same network can exploit a format-string flaw in the camera’s CDeviceOperator component to achieve remote code execution.
Read more → -
ZDI-26-399: (0Day) (Pwn2Own) Lorex 2K Indoor Wi-Fi Security Camera Device Management Server Improper Certificate Validation Vulnerability
Network-adjacent attackers can execute arbitrary code on Lorex 2K Indoor Wi-Fi cameras without user interaction.
Read more → -
ZDI-26-400: (0Day) AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability
AnyDesk installations are vulnerable to a local denial-of-service triggered via the screen-recording link feature.
Read more → -
ZDI-26-401: (0Day) AnyDesk Support Information Link Following Denial-of-Service Vulnerability
The vulnerability requires local code execution to trigger a denial-of-service condition via link following in AnyDesk.
Read more → -
ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability
The vulnerability involves link following in Glary Utilities that can lead to local privilege escalation.
Read more → -
ZDI-26-403: (0Day) Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
Unauthenticated attackers can trigger a denial-of-service via the downloadBlob function.
Read more → -
CISA KEV — Adobe ColdFusion (CVE-2026-48282)
CVE-2026-48282 is a path traversal vulnerability in Adobe ColdFusion that has been observed as actively exploited.
Read more → -
CISA KEV — JoomShaper SP Page Builder (CVE-2026-48908) +2 more
The advisory adds three vulnerabilities involving page builders and a low-code platform, all tied to web-facing components with access control or file upload flaws.
Read more → -
Siemens SINEC OS
The advisory states that SINEC OS versions prior to 4.0 contain multiple vulnerabilities, including buffer overflows and improper access control, with a maximum CVSS score of 9.8.
Read more → -
Hitachi Energy PROMOD V
The advisory states that PROMOD V versions 1.0.10 and prior use HTTP instead of HTTPS due to lack of HTTPS support in the third-party Digipede server, exposing data in transit.
Read more → -
Labcenter Proteus 9
The advisory states that Labcenter Proteus 9.1_SP4_Build_42914 is affected by multiple memory corruption vulnerabilities, including out-of-bounds write and stack-based buffer overflow. Successful exploitation could lead to arbitrary code execution.
Read more → -
Hitachi Energy e-mesh EMS
The vulnerability stems from NGINX components in e-mesh EMS using versions v1.30.0 or below, where specific rewrite rule configurations can trigger a heap buffer overflow.
Read more → -
Digi International PortServer TS, Digi One SP IA
The advisory states that affected Digi devices can allow unauthenticated access to restricted resources due to an authorization flaw.
Read more → -
Siemens Mendix Studio Pro
The advisory states that a file parsing vulnerability in Mendix Studio Pro could allow arbitrary code execution when processing a malicious project during the build pipeline.
Read more → -
Hydro-Québec Le Circuit Electrique charging station backend
The advisory states that affected charging station backends allowed unauthenticated websocket connections, potentially enabling privilege escalation.
Read more → -
ST Engineering iDirect iQ-Series Terminals
The advisory states that unauthenticated access to specific API endpoints can expose sensitive device information, including credentials used for satellite network authentication.
Read more → -
Gardyn IoT Hub
The advisory states that unauthenticated access to the iothubowner key could allow full control over managed devices and execution of arbitrary commands on connected devices.
Read more → -
CubeSpace CW0057 Reaction Wheel
The vulnerability requires physical access to upload malicious firmware, and the device can be recovered using the independent bootloader.
Read more → -
CISA KEV — Microsoft SharePoint Server (CVE-2026-45659)
The advisory states that CVE-2026-45659 in Microsoft SharePoint Server is being actively exploited, involving deserialization of untrusted data.
Read more → -
Delta Electronics DVP12SE PLC
The advisory states that all versions of the Delta Electronics DVP12SE PLC are affected by vulnerabilities allowing unauthenticated remote access to critical control functions via Modbus TCP.
Read more → -
XZ Utils vulnerability impacting B&R Products
The vulnerability stems from a race condition in the multithreaded .xz decoder within liblzma, which could lead to memory corruption or service disruption if exploited.
Read more → -
Frangoteam FUXA SCADA/HMI
The advisory states that unauthenticated remote attackers can exploit a path normalization flaw to access sensitive user and role data via the REST API.
Read more → -
StoneFly Storage Concentrator
The advisory identifies hardcoded credentials in a configuration file that can be decoded to plaintext, exposing access to multiple internal services.
Read more → -
Schneider Electric EcoStruxure IT Data Center Expert
The advisory states that affected versions of EcoStruxure IT Data Center Expert are susceptible to XML external entity reference exploitation, which could lead to server-side file disclosure when crafted payloads are submitted via SOAP endpoints.
Read more → -
Mitsubishi Electric MELSOFT Update Manager SW1DND-UDM-M
The advisory states that a heap-based buffer overflow in the 7-Zip component of MELSOFT Update Manager could allow local attackers to execute arbitrary code via a specially crafted archive file.
Read more → -
OFFIS DCMTK Toolkit
The advisory states that DCMTK versions <=3.7.0 are affected by multiple vulnerabilities, including path traversal and memory management issues.
Read more → -
Schneider Electric EasyLogic T150 and Saitel DP RTU
Credentials are stored in firmware or system files without authentication requirements, exposing them to unauthenticated access.
Read more → -
CISA KEV — SimpleHelp (CVE-2026-48558)
CVE-2026-48558 is an authentication bypass vulnerability in SimpleHelp that has been added to CISA's KEV Catalog due to evidence of active exploitation.
Read more → -
Russian Intelligence Services Continue to Target Commercial Messaging Applications
The advisory updates previous reporting on Russian Intelligence Services targeting messaging app accounts, adding new phishing message samples and observed tactics.
Read more → -
CISA KEV — PTC Windchill and FlexPLM (CVE-2026-12569) +1 more
The advisory adds a server-side request forgery (SSRF) flaw in Cisco Unified Communications Manager and an input validation issue in PTC Windchill and FlexPLM to the KEV Catalog due to active exploitation.
Read more → -
EVoke Systems Charging Station Management System
The advisory states that all versions of EVoke CSMS are affected due to unauthenticated WebSocket endpoints that allow attackers to impersonate charging stations.
Read more → -
Horner Automation Cscape
The vulnerability affects Cscape versions prior to 10.2 SP3 and is triggered by parsing malicious CSP files, potentially leading to information disclosure and arbitrary code execution.
Read more → -
Yokogawa FAST/TOOLS and CI Server
The advisory states that affected versions of Yokogawa FAST/TOOLS and CI Server may transmit CI Server settings in cleartext, potentially enabling further attacks.
Read more → -
Schneider Electric PowerLogic P7
The advisory states that affected PowerLogic P7 devices may suffer loss of HMI operability and configuration functionality due to multiple vulnerabilities, including OS command injection and NULL pointer dereference.
Read more → -
pydicom pynetdicom Library
The vulnerability stems from unsanitized use of attacker-supplied data in file path operations within the qrscp application's C-STORE handler.
Read more → -
H.VIEW HV-500S6 IP Camera
The advisory states that command injection and unrestricted file upload vulnerabilities exist in the certificate generation and upload interfaces of the affected IP camera model.
Read more → -
OHIF Viewers DICOM
The advisory states that a server-side request forgery (SSRF) vulnerability in OHIF DICOM Web Viewer Framework versions up to v3.12.0 could result in unauthorized exfiltration of authenticated clinicians' OIDC Bearer tokens.
Read more → -
Delta Electronics DTM Soft
The advisory states that all versions of Delta Electronics DTM Soft are affected by a deserialization vulnerability. Exploitation requires user interaction to open a malicious project file.
Read more → -
Daktronics Controller Firmware
The advisory states that multiple Daktronics controller models are affected by vulnerabilities allowing unauthenticated root-level access, including path traversal and hardcoded credentials.
Read more → -
Using SASE in a Modern TIC 3.0 Solution
The advisory is informational guidance on integrating SASE with TIC 3.0, not a security vulnerability or mitigation notice.
Read more → -
ZDI-26-366: Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability
The vulnerability stems from exposed driver file APIs in Fuji Electric Tellus pcid64 that can be abused to delete arbitrary files.
Read more → -
ZDI-26-367: Fuji Electric Tellus pcid64 Driver Registry APIs Exposed Dangerous Method Local Privilege Escalation Vulnerability
The Fuji Electric Tellus pcid64 driver exposes registry APIs that can be exploited by local attackers for privilege escalation.
Read more → -
ZDI-26-368: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
The vulnerability involves a SQL injection in Quest NetVault Backup's NVBUDashboard that can lead to remote code execution, with authentication bypass possible.
Read more → -
ZDI-26-369: Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass Vulnerability
The vulnerability enables authentication bypass via cross-site scripting, requiring user interaction such as visiting a malicious page.
Read more → -
ZDI-26-370: Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
The vulnerability involves an SQL injection in Quest NetVault Backup's NVBURASDevice that can lead to remote code execution, with authentication bypass possible.
Read more → -
ZDI-26-371: Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-372: Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-373: Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-374: Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-375: Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-376: Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution Vulnerability
Authentication is required to exploit the vulnerability, but the advisory notes the authentication mechanism can be bypassed.
Read more → -
ZDI-26-377: Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability
The vulnerability enables authentication bypass via cross-site scripting in Quest NetVault Backup's viewclient component, requiring user interaction.
Read more → -
ZDI-26-378: ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability
Authentication is required to exploit this directory traversal vulnerability leading to arbitrary file deletion in ATEN Unizon.
Read more → -
ZDI-26-379: ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability
Authentication is required to exploit this directory traversal vulnerability in ATEN Unizon's uploadSSL functionality.
Read more → -
ZDI-26-380: ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability
The vulnerability enables unauthenticated remote attackers to disclose sensitive information via a directory traversal in the writeFileToHttpServletResponse function.
Read more → -
ZDI-26-381: ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability
The vulnerability involves a directory traversal in the restoreDB functionality of ATEN Unizon, requiring authentication for exploitation.
Read more → -
ZDI-26-382: ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability
The vulnerability requires authentication and involves a directory traversal in the ImportDeviceList function of ATEN Unizon, potentially leading to remote code execution.
Read more → -
ZDI-26-383: ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
The vulnerability requires authentication to exploit and affects the doCryptoHugeFileToFile function in ATEN Unizon.
Read more → -
ZDI-26-384: MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability
The vulnerability requires user interaction, such as visiting a malicious page or opening a malicious file, to trigger remote code execution.
Read more → -
ZDI-26-385: Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability
The vulnerability requires authentication but allows remote code execution via a file upload command injection in the Unraid Web Server.
Read more → -
ZDI-26-386: Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability
Authentication is required to exploit the command injection vulnerability in the Unraid Web Server's ToggleState function.
Read more → -
ZDI-26-387: Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability
The vulnerability in Oracle PeopleSoft's HttpListeningConnector permits unauthenticated remote attackers to trigger arbitrary server-side requests.
Read more → -
ZDI-26-388: Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability
The vulnerability involves deserialization of untrusted data in Oracle PeopleSoft's HubMBeanPersistance component, with authentication bypass possible despite requiring login.
Read more → -
ZDI-26-389: Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability
The advisory notes authentication is required but can be bypassed, which may expand the pool of potential attackers despite the need for initial credentials.
Read more → -
ZDI-26-390: X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability
The vulnerability is a stack-based buffer overflow in X.Org Server's font alias handling, which can be triggered locally to escalate privileges.
Read more → -
ZDI-26-391: X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability
A use-after-free in X.Org Server's miSyncDestroyFence function may allow local privilege escalation.
Read more → -
ZDI-26-392: X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability
A stack-based buffer overflow in X.Org Server's Xkb key types can allow local privilege escalation.
Read more → -
ZDI-26-393: X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability
A stack-based buffer overflow in X.Org Server's SetMap request can enable local privilege escalation.
Read more → -
ZDI-26-394: X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability
The vulnerability is a use-after-free in X.Org Server's FreeCounter function, potentially enabling local privilege escalation.
Read more → -
ZDI-26-395: X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability
A use-after-free in X.Org Server's SyncChangeCounter function may allow local privilege escalation.
Read more →
Page 7 of 12 · 1,153 advisories