Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
ZDI-26-396: X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability is a local out-of-bounds read in X.Org Server's ChangeDrawableAttributes function, potentially disclosing sensitive information.
Read more → -
ZDI-26-397: X.Org Server CreateSaverWindow Use-After-Free Information Disclosure Vulnerability
The vulnerability involves a use-after-free in the CreateSaverWindow function, potentially disclosing sensitive information to local attackers.
Read more → -
ZDI-26-361: Adobe Acrobat Reader DC Field signatureInfo Use-After-Free Remote Code Execution Vulnerability
A use-after-free vulnerability exists in Adobe Acrobat Reader DC related to the handling of the 'signatureInfo' field, which could lead to remote code execution.
Read more → -
ZDI-26-362: Oracle VirtualBox VMSVGA Stack-based Buffer Overflow Local Privilege Escalation Vulnerability
The vulnerability is a stack-based buffer overflow in Oracle VirtualBox's VMSVGA component, requiring high-privileged code execution in the guest system to trigger.
Read more → -
ZDI-26-363: Docker MCP Plugin OCI Image Label Parsing Argument Injection Remote Code Execution Vulnerability
The vulnerability requires user interaction through referencing a malicious Docker image via a docker URI scheme.
Read more → -
ZDI-26-364: FlowiseAI Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
The vulnerability in FlowiseAI Flowise CSV Agent permits remote code execution without authentication.
Read more → -
ZDI-26-365: FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability
The advisory notes that authentication is required but can be bypassed, which may expand the pool of potential attackers despite the need for initial access.
Read more → -
CISA KEV — Lantronix EDS5000 (CVE-2025-67038) +3 more
The advisory adds four actively exploited vulnerabilities, three of which affect Ubiquiti UniFi OS, indicating a cluster of issues in the same product.
Read more → -
Siemens SINEC INS
The advisory states that SINEC INS before version 1.0 SP2 Update 6 is affected by an OS command injection vulnerability via the /api/sftp/uploadFiles endpoint, where crafted directory names can lead to arbitrary command execution.
Read more → -
Siemens Products using OpenSSL
The vulnerability affects multiple Siemens industrial communication products using OpenSSL, with a focus on router and server devices used in network infrastructure.
Read more → -
Hubbell Aclara Metrum Cellular Web Interface
The advisory states that critical functions in the Aclara Metrum Cellular Web Interface lack authentication, allowing unauthenticated attackers to alter settings and restart the device.
Read more → -
ABB Freelance Security Lock
The advisory notes that undocumented or special key combinations on modern keyboards could allow bypass of Freelance Operations, potentially granting access to underlying OS functions despite Security Lock being enabled.
Read more → -
Impact of Linux Kernel vulnerabilities on B&R products
The advisory identifies local privilege escalation risks in B&R products using affected Linux kernel versions, with public proof-of-concept exploits available.
Read more → -
Siemens SIPROTEC 5 Using DIGSI5 Protocol
The advisory states that authenticated users may exploit the DIGSI 5 protocol to upload arbitrary files, potentially leading to permanent denial of service. A new allow-list feature in updated versions restricts file uploads to mitigate the vulnerability.
Read more → -
Siemens WinCC Certificate Manager
The advisory states that WinCC Certificate Manager stores key material with insufficient protection, potentially allowing extraction of sensitive information.
Read more → -
CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure
The advisory states that approximately 74,000 Fortinet devices may have had credentials exposed, with active exploitation reported on internet-accessible systems.
Read more → -
CISA KEV — Splunk Enterprise (CVE-2026-20253)
The added vulnerability allows total control of affected systems post-exploitation and is already being actively exploited.
Read more → -
Schneider Electric Easergy, EcoStruxture, PowerLogic, and Saitel Products
The advisory mentions PowerChute Serial Shutdown in the summary but lists vulnerabilities affecting Easergy, EcoStruxture, PowerLogic, and Saitel products, with no explicit link between them in the provided text.
Read more → -
Mitsubishi Electric Co.'s MELSEC iQ-F Series FX5-ENET/IP Ethernet Module
The advisory states that all versions of the FX5-ENET/IP module are affected by a DoS vulnerability due to excessive packet processing. No fix is planned for this product.
Read more → -
Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT
The device transmits sensitive health data in cleartext over Bluetooth, exposing glucose measurements to interception by nearby attackers.
Read more → -
Rockwell Automation FactoryTalk Historian Site Edition
The advisory identifies a race condition that could allow attackers to obtain a valid authentication token by repeatedly sending requests to the login endpoint.
Read more → -
Schneider Electric EasyLogic T150 and Saitel DP
The same path traversal vulnerability (CVE-2026-6865) affects two related Schneider Electric remote terminal units, potentially allowing unauthorized access to sensitive files.
Read more → -
AzeoTech DAQFactory
The advisory states that loading untrusted .ctl files in AzeoTech DAQFactory <=21.1 may lead to arbitrary code execution due to a type confusion vulnerability.
Read more → -
Mitsubishi Electric MELSEC iQ-F Series
The affected module may enter a denial-of-service state due to improper handling of rapid TCP connections, leading to memory access issues.
Read more → -
AVer PTC cameras
The advisory states that all versions of the affected AVer PTC camera models are vulnerable to arbitrary code execution via a crafted web request.
Read more → -
CISA KEV — Widget Factory Joomla Content Editor (CVE-2026-48907)
The vulnerability allows improper access control in the Widget Factory Joomla Content Editor, potentially enabling full system control post-exploitation.
Read more → -
Rockwell Automation CompactLogix
The advisory states that exposed Connection IDs on the web interface can be abused to trigger a denial-of-service condition via improper validation of CIP protocol fields.
Read more → -
Rockwell Automation FactoryTalk Analytics PavilionX
The advisory states that affected versions of FactoryTalk Analytics PavilionX lack proper authorization controls on API endpoints, potentially allowing unauthenticated attackers to perform administrative actions.
Read more → -
Rockwell Automation FLEX I/O EtherNet/IP Adapters
The advisory states that exploitation could lead to unauthorized access and loss of availability due to memory handling and authentication flaws in specific FLEX I/O adapter versions.
Read more → -
Rockwell Automation RSLinx
The advisory states that exploitation can cause a denial of service where the application becomes unresponsive and does not recover automatically.
Read more → -
Rockwell Automation Logix 5370 & 5570 Controllers Vulnerable To Denial of Service Via CIP
Devices with less memory are more likely to experience a major nonrecoverable fault when a crafted CIP message is sent.
Read more → -
CISA KEV — Cisco Catalyst SD-WAN Manager Directory or (CVE-2026-20262) +1 more
Two vulnerabilities involving path traversal in network and web management tools are now in the KEV catalog due to observed exploitation.
Read more → -
CISA KEV — Oracle PeopleSoft Enterprise PeopleTools (CVE-2026-35273)
The added vulnerability affects Oracle PeopleSoft Enterprise PeopleTools and involves missing authentication for a critical function.
Read more → -
CISA KEV — Ivanti Sentry (CVE-2026-10520)
The added vulnerability allows OS command injection, which the advisory explicitly states grants total control of the affected asset post-exploitation.
Read more → -
Brickcom Cameras
The advisory states that live video snapshots can be accessed without authentication via the /ONVIF endpoint on affected Brickcom camera models.
Read more → -
Naxclow IoT Platform
The advisory states that all versions of multiple Naxclow IoT devices are affected by an authorization bypass vulnerability allowing silent device reassignment via replayed onboarding sequences.
Read more → -
Yarbo Android/iOS Mobile Application and Cloud Infrastructure
Hard-coded credentials in the Yarbo mobile app grant access to all robot telemetry and command topics via the cloud MQTT infrastructure.
Read more → -
ZDI-26-356: Apache HTTP Server mod_proxy_ajp Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability requires prior compromise of an AJP backend to enable information disclosure via mod_proxy_ajp.
Read more → -
ZDI-26-357: Allegra exportReport Directory Traversal Information Disclosure Vulnerability
The vulnerability requires authentication and could allow remote information disclosure via a directory traversal in the exportReport functionality.
Read more → -
ZDI-26-358: Allegra downloadAttachment Cross-Site Scripting Authentication Bypass Vulnerability
The vulnerability requires user interaction, such as visiting a malicious page or opening a malicious file, to trigger cross-site scripting.
Read more → -
ZDI-26-359: Samsung rlottie Numeric Truncation Remote Code Execution Vulnerability
The vulnerability involves a numeric truncation issue in Samsung rlottie that can lead to remote code execution when the library processes input.
Read more → -
ZDI-26-360: MATE Desktop Atril Document Viewer EPUB File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
The vulnerability is a heap-based buffer overflow in Atril Document Viewer triggered by parsing a malicious EPUB file.
Read more → -
2026-008: Critical vulnerabilities in Ivanti Sentry
The advisory states that unauthenticated remote code execution is possible on vulnerable Ivanti Sentry devices.
Read more → -
2026-007: Critical Vulnerability in Windows Netlogon
The advisory states that the vulnerability is under active exploitation by attackers.
Read more → -
ZDI-26-355: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Reader DC related to annotation handling, requiring user interaction to trigger.
Read more → -
ZDI-26-328: ASUS MyASUS Origin Validation Error Local Privilege Escalation Vulnerability
The vulnerability stems from an origin validation error in ASUS MyASUS that may allow local privilege escalation.
Read more → -
CISA KEV — Arista Extensible Operating System Incomplete Comparison (CVE-2026-7473) +2 more
The addition of a network infrastructure vulnerability in Arista's Extensible Operating System may indicate interest in targeting backbone devices.
Read more → -
Schneider Electric Modicon Network Managed Switches
The vulnerability only affects devices where the RADIUS Server Message Authenticator option is disabled, as the default configuration is not vulnerable.
Read more → -
Schneider Electric EcoStruxure Panel Server
The advisory states that affected EcoStruxure Panel Server versions may revert to initial credentials in rare circumstances, potentially allowing unauthorized authentication.
Read more → -
Siemens KACO Blueplanet Inverters
The advisory states that serial numbers from affected inverters can be used to derive credentials, enabling unauthorized access. This affects a wide range of KACO blueplanet inverter models across multiple product lines.
Read more → -
ZDI-26-347: Adobe Acrobat Reader DC Multimedia Rendition Use-After-Free Remote Code Execution Vulnerability
The vulnerability is triggered by user interaction with a malicious file or page, indicating delivery likely depends on social engineering.
Read more → -
ZDI-26-348: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Reader DC related to annotation handling, requiring user interaction to trigger.
Read more → -
ZDI-26-349: Adobe Acrobat Pro DC Annots.api Use-After-Free Remote Code Execution Vulnerability
A use-after-free vulnerability exists in Adobe Acrobat Pro DC's Annots.api component, requiring user interaction to trigger.
Read more → -
ZDI-26-350: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability
A heap-based buffer overflow exists in Adobe USD-Fileformat-plugins that could allow remote code execution upon interaction with the USD library.
Read more → -
ZDI-26-351: Adobe USD-Fileformat-plugins Heap-based Buffer Overflow Remote Code Execution Vulnerability
The vulnerability involves a heap-based buffer overflow in Adobe USD-Fileformat-plugins that requires interaction with the USD library for exploitation.
Read more → -
ZDI-26-352: Adobe Acrobat Pro DC AcroForm Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Pro DC's AcroForm functionality, requiring user interaction to trigger.
Read more → -
ZDI-26-353: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Reader DC related to annotation handling, requiring user interaction to trigger.
Read more → -
ZDI-26-354: Adobe Acrobat Reader DC Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Reader DC related to annotation handling, requiring user interaction to trigger via a malicious file or page.
Read more → -
ZDI-26-333: X.Org Server XkbSetCompatMap Integer Underflow Privilege Escalation Vulnerability
The vulnerability involves an integer underflow in X.Org Server's XkbSetCompatMap function, which can be triggered by a local attacker to escalate privileges.
Read more → -
ZDI-26-334: X.Org Server CheckSetGeom Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability is an out-of-bounds read in the CheckSetGeom function of X.Org Server, potentially disclosing sensitive information to local attackers.
Read more → -
ZDI-26-335: X.Org Server SyncAwaitFence Use-After-Free Privilege Escalation Vulnerability
A use-after-free in X.Org Server's SyncAwaitFence function may allow local privilege escalation.
Read more → -
ZDI-26-336: X.Org Server CheckKeyActions Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability is a local out-of-bounds read in the CheckKeyActions function of X.Org Server, potentially disclosing sensitive information.
Read more → -
ZDI-26-337: X.Org Server CheckKeyTypes Buffer Overflow Privilege Escalation Vulnerability
A buffer overflow in X.Org Server's CheckKeyTypes function may allow local privilege escalation.
Read more → -
ZDI-26-338: NVIDIA Transformers4Rec Model.load Deserialization of Untrusted Data Remote Code Execution Vulnerability
The vulnerability requires user interaction, such as opening a malicious file or visiting a malicious page, to trigger remote code execution.
Read more → -
ZDI-26-339: Microsoft Windows Narrator Braille Support brlapi Exposed Dangerous Function Local Privilege Escalation Vulnerability
The vulnerability affects Microsoft Windows systems with Braille support for Narrator enabled, requiring local code execution and specific feature installation for exploitation.
Read more → -
ZDI-26-340: Progress Software Kemp LoadMaster dodelapikey Uninitialized Memory Remote Code Execution Vulnerability
The vulnerability requires authentication and involves uninitialized memory in the dodelapikey function, potentially leading to remote code execution.
Read more → -
ZDI-26-341: Progress Software Kemp LoadMaster dolistapikeys Uninitialized Memory Remote Code Execution Vulnerability
The vulnerability requires authentication and affects the dolistapikeys functionality in Progress Software Kemp LoadMaster.
Read more → -
ZDI-26-342: Progress Software Kemp LoadMaster apiuser Uninitialized Memory Remote Code Execution Vulnerability
The vulnerability affects the apiuser component in Progress Software Kemp LoadMaster and can be exploited remotely without authentication.
Read more → -
ZDI-26-343: Adobe Acrobat Reader DC TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
The vulnerability stems from an integer overflow during TIF file parsing in Adobe Acrobat Reader DC, requiring user interaction to trigger.
Read more → -
ZDI-26-344: Adobe Acrobat Reader DC Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
The vulnerability involves an out-of-bounds read in the Doc object within Adobe Acrobat Reader DC, potentially disclosing sensitive information.
Read more → -
ZDI-26-345: Adobe Acrobat Reader DC Font Handling Use-After-Free Remote Code Execution Vulnerability
The vulnerability is triggered through malicious file or page interaction, indicating an attack vector dependent on user action.
Read more → -
ZDI-26-346: Adobe Acrobat Reader DC Annotation Use-After-Free Information Disclosure Vulnerability
The vulnerability is a use-after-free in Adobe Acrobat Reader DC related to annotation handling, requiring user interaction to trigger.
Read more → -
ZDI-26-332: QEMU calc_image_hostmem Integer Overflow Local Privilege Escalation Vulnerability
The vulnerability involves an integer overflow in QEMU's calc_image_hostmem function, potentially allowing local privilege escalation within the guest environment.
Read more → -
CISA KEV — BerriAI LiteLLM (CVE-2026-42271) +1 more
CVE-2026-42271 involves command injection in BerriAI LiteLLM, indicating potential for unauthorized command execution where the software is deployed.
Read more → -
CISA KEV — SolarWinds Serv-U (CVE-2026-28318)
CVE-2026-28318 is an uncontrolled resource consumption vulnerability in SolarWinds Serv-U, now listed in CISA's KEV Catalog due to evidence of active exploitation.
Read more → -
Hitachi Energy RTU500
The advisory lists multiple overlapping version ranges for the RTU500 series CMU firmware, with repeated CVEs across entries, which may indicate consolidated reporting of previously disclosed issues.
Read more → -
B&R PPT30 Operating System
The vulnerability affects the OPC-UA server in B&R PPT30 Operating System versions prior to 1.8.0 and could be exploited by an unauthenticated network-based attacker to block access to the service.
Read more → -
Hitachi Energy ITT600 Explorer
The affected ITT600 Explorer versions include those prior to 2.1 SP6 and specifically 2.1 SP6 itself, with a patch available in 2.1 SP6 HF1.
Read more → -
Hitachi Energy MACH HiDraw
The vulnerability affects MACH HiDraw versions 9.22 and prior, with exploitation requiring authenticated local access and a specially crafted XML file.
Read more → -
NAVTOR NavBox
The advisory states that hard-coded credentials in NavBox's SOAP implementation could allow a local attacker to bypass authentication and access privileged file operations.
Read more → -
ZDI-26-329: (Pwn2Own) Microsoft Edge Origin Validation Error Security Bypass Vulnerability
The vulnerability requires user interaction, such as visiting a malicious page, to exploit a security bypass in Microsoft Edge.
Read more → -
ZDI-26-330: (Pwn2Own) Microsoft Edge Navigation Handling Universal Cross-Site Scripting Vulnerability
The vulnerability requires user interaction to visit a malicious page or open a malicious file, indicating execution depends on social engineering.
Read more → -
ZDI-26-331: (Pwn2Own) Microsoft Edge Feedback Log File Handling Directory Traversal Remote Code Execution Vulnerability
The vulnerability involves directory traversal in Microsoft Edge's feedback log file handling, potentially enabling remote code execution with user interaction.
Read more → -
ZDI-26-328: ASUS Business Manager Service Client-Side Authentication Local Privilege Escalation Vulnerability
The vulnerability involves client-side authentication in the ASUS Business Manager Service, which may allow local privilege escalation if exploited.
Read more → -
CISA KEV — Mirasvit Full Page Cache Warmer (CVE-2026-45247)
The added vulnerability involves deserialization of untrusted data in a Magento extension, a flaw type often exploited to achieve remote code execution.
Read more → -
ZDI-26-327: Docker Desktop grpcfuse Kernel Module Uncontrolled Recursion Denial-of-Service Vulnerability
The vulnerability resides in the Docker Desktop grpcfuse kernel module, which can be triggered by low-privileged code running inside a container.
Read more → -
CISA KEV — Linux Kernel (CVE-2022-0492) +1 more
CVE-2022-0492 involves improper authentication in the Linux kernel, a component present in many enterprise and embedded systems. Its inclusion in the KEV catalog indicates observed exploitation despite its 2022 publication date.
Read more → -
CISA and Partners Urge Hardening Automatic Tank Gauge Systems
The advisory states that internet-exposed ATG systems are being targeted via hardcoded credentials and command execution. Removing these systems from public networks is explicitly recommended.
Read more → -
CISA KEV — Oracle WebLogic Server Unspecified (CVE-2024-21182)
CVE-2024-21182 is an unspecified vulnerability in Oracle WebLogic Server now confirmed as actively exploited.
Read more → -
CISA KEV — Palo Alto Networks PAN-OS (CVE-2026-0257)
CVE-2026-0257 is an authentication bypass vulnerability in Palo Alto Networks PAN-OS that CISA has observed being actively exploited.
Read more → -
Supply Chain Compromises Impact Nx Console and GitHub Repositories
The malicious Nx Console extension (18.95.0) was distributed via VS Code’s automatic update mechanism, potentially affecting systems without user interaction.
Read more → -
MacGregor Voyage Data Recorder (VDR) G4e
The advisory states that default credentials are present without enforced password changes, and authenticated users can extract password hashes via backup files.
Read more → -
KMW CCTV Security Cameras
The advisory states that affected KMW cameras allow unauthenticated password resets, enabling full access to camera feeds and settings.
Read more → -
XCharge C6
The advisory states that XCharge C6 devices with firmware prior to May 22, 2026, are affected by multiple critical vulnerabilities, including firmware update mechanisms that lack cryptographic validation.
Read more → -
CP Plus 8 Ch. Network Video Recorder
The advisory specifies a stored XSS vulnerability that persists in the device backend and executes when users access affected pages.
Read more → -
Fourth Frontier Frontier X Mobile Application, Frontier X2
The advisory states that unauthenticated BLE access allows read/write of critical GATT characteristics, and the mobile app does not authenticate the connected device, enabling spoofing and data injection.
Read more → -
ABB Busch-Welcome 2 Wire Door Opener Actuator
The advisory states that toggling the mode switch and restarting power can recalibrate the system to correct the misconfiguration.
Read more → -
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
The advisory states that hard-coded administrative credentials are present in the firmware of the affected device, which can be extracted and used to gain unauthorized access.
Read more → -
ABB EIBPORT
The advisory states that affected ABB EIBPORT devices can expose session IDs and allow configuration changes if exploited. A firmware update is available to address the vulnerabilities.
Read more → -
ZDI-26-320: TrendAI Vision One Security Agent Origin Validation Error Local Privilege Escalation Vulnerability
The vulnerability requires an attacker to already have the ability to execute low-privileged code on the system.
Read more →
Page 8 of 12 · 1,153 advisories