← Back to browse · API

CVE-2025-61956

Severity
CRITICAL
CVSS
10.0
EPSS
0.00701
Risk score
40.25
CISA KEV
No
PoC
No
Published
2025-11-04
Modified
2025-11-04
First seen
2026-08-07
Aliases
EUVD-2025-37762, GHSA-4P8R-C649-4CGV
Products
Radiometrics:VizAir 0 <08/2025
Sources
euvd EUVD-2025-37762

Description

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning.

References