BaselineWatch
Desk

CVE-2025-61956

10.0 critical SSVC exploitation: none Analyzed

Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Additionally, manipulated meteorological data could mislead forecasters and ATC, causing inaccurate flight planning.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 10.0 · radiometricsNVD modified 2026-10-18 21:10

Affected (CPE criteria) 1

  • cpe:2.3:a:radiometrics:vizair:*:*:*:*:*:*:*:*

References 2