Radar
A personal hobby project. Radar aggregates security advisories from CISA, Zero Day Initiative and CERT-EU and adds short editorial highlights on what I find notable from a European infrastructure perspective — not a threat-intel service, not exhaustive, just what catches my eye.
-
CISA Urges Patching Critical Vulnerability in BeyondTrust Remote Support
BeyondTrust Remote Support versions 26.2.3 and earlier are vulnerable to CVE-2026-102764.
Read more → -
CISA KEV — Fortinet Multiple Products (CVE-2025-61624) +1 more
Fortinet multiple products and BeyondTrust Remote Support have been added to CISA’s KEV catalog, indicating active exploitation.
Read more → -
Key Practices for Incident Readiness and Response in Super Intelligence Training and Evaluation
The advisory provides ten voluntary core practices for organizations that train and evaluate highly capable super-intelligence agents.
Read more → -
Cyber Threat Actors Use a Variety of Techniques to Target Election and Campaign Officials
Phishing and smishing are identified as primary techniques targeting election officials.
Read more → -
ZDI-26-784: FreeBSD Kernel kqueue Use-After-Free Local Privilege Escalation Vulnerability
The advisory reports a use-after-free bug in the FreeBSD kernel’s kqueue implementation that enables local privilege escalation.
Read more → -
ZDI-26-785: FreeBSD Kernel Shared Memory Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory notes a local privilege escalation in the FreeBSD kernel via a shared memory TOCTOU bug.
Read more → -
ZDI-26-781: LibreOffice EMF+ Brush Integer Overflow Remote Code Execution Vulnerability
LibreOffice contains an integer overflow in EMF+ brush handling that can be triggered remotely. Exploitation requires a user to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-782: LibreOffice PDF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
LibreOffice's PDF parser contains a heap-based buffer overflow that can be triggered remotely.
Read more → -
ZDI-26-783: LibreOffice PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
LibreOffice's PDF parser has an out-of-bounds write that can be triggered by a crafted PDF.
Read more → -
ZDI-26-779: (0Day) Sparx Systems Enterprise Architect XSLT Debugger XML External Entity Processing Information Disclosure Vulnerability
The XSLT debugger in Sparx Systems Enterprise Architect processes external entities, enabling information disclosure.
Read more → -
ZDI-26-780: X.Org Server GestureBuildSprite Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s GestureBuildSprite function that can disclose information.
Read more → -
CISA KEV — Atlassian Multiple Products (CVE-2026-21589)
CVE-2026-21589 impacts multiple Atlassian products by exposing files or directories to external parties.
Read more → -
CISA Malcolm
Malcolm versions up to v26.07.1 permit unauthenticated access to the Arkime backend via a crafted URL path.
Read more → -
Eclipse Foundation Eclipse Milo
Eclipse Milo versions 0.6.0 through 1.1.4 are affected by multiple high-severity vulnerabilities.
Read more → -
Guangzhou Juan IoT Technology EseeCloud
EseeCloud App versions up to 4.9.6 and firmware up to 4.9.86.0 contain hard-coded credentials.
Read more → -
J4Care dcm4che
Version 5.35.1 of J4Care dcm4chee-arc-light is affected; a fix is provided in release 5.35.2.
Read more → -
Thermo Fisher Torrent Suite Software
Thermo Fisher Torrent Suite Software versions up to 5.18 are vulnerable to a path-traversal flaw that allows an authenticated attacker to read arbitrary files.
Read more → -
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
Active exploitation of the AMP feature in Cisco Secure Email Gateway is reported. The flaw permits unauthenticated remote code execution with root privileges.
Read more → -
ZDI-26-777: Adobe Photoshop AdobePDFL PDF JPEG Parsing Integer Overflow Remote Code Execution Vulnerability
Adobe Photoshop's PDF JPEG parsing suffers an integer overflow that can lead to remote code execution.
Read more → -
ZDI-26-778: Adobe Photoshop DCM Pixel Data Parsing Integer Overflow Remote Code Execution Vulnerability
Exploitation requires the victim to open a malicious file or visit a malicious page.
Read more → -
ZDI-26-758: Docker Buildx Filesystem Entitlements Protection Mechanism Failure Remote Code Execution Vulnerability
Docker Buildx can be remotely compromised if a user visits a malicious page or opens a malicious file.
Read more → -
ZDI-26-759: X.Org Server XKB TextDoodad Double Free Privilege Escalation Vulnerability
The issue is a double-free in X.Org Server’s XKB TextDoodad handling.
Read more → -
ZDI-26-760: X.Org Server Present Extension Use-After-Free Information Disclosure Vulnerability
The advisory reports a use-after-free in X.Org Server’s Present extension that can disclose information.
Read more → -
ZDI-26-761: X.Org Server XInput Passive Grab Use-After-Free Information Disclosure Vulnerability
A use-after-free in X.Org Server’s XInput passive grab handling can lead to information disclosure.
Read more → -
ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server’s GLX RenderLarge path can be used for local privilege escalation.
Read more → -
ZDI-26-763: X.Org Server XKB XkbResizeKeyType Numeric Truncation Privilege Escalation Vulnerability
The XkbResizeKeyType function in X.Org Server contains a numeric truncation that can be exploited for local privilege escalation.
Read more → -
ZDI-26-764: X.Org Server XFixes Pointer Barrier Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server's XFixes Pointer Barrier can enable local privilege escalation.
Read more → -
ZDI-26-765: X.Org Server XKB Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in X.Org Server's XKB handling enables local privilege escalation.
Read more → -
ZDI-26-766: X.Org Server RandR Heap-based Buffer Overflow Privilege Escalation Vulnerability
The advisory notes a heap-based buffer overflow in the RandR extension of X.Org Server that can be used for local privilege escalation.
Read more → -
ZDI-26-767: X.Org Server Glamor CopyArea Heap-based Buffer Overflow Privilege Escalation Vulnerability
A heap-based buffer overflow in the Glamor CopyArea function of X.Org Server enables local privilege escalation.
Read more → -
ZDI-26-768: X.Org Server XInput ProcXIPassiveUngrabDevice Heap-based Buffer Overflow Privilege Escalation Vulnerability
Heap-based buffer overflow in X.Org Server’s XInput ProcXIPassiveUngrabDevice function enables local privilege escalation.
Read more → -
ZDI-26-769: X.Org Server XKB XkbSetMap Request Out-Of-Bounds Read Information Disclosure Vulnerability
The X.Org Server XKB XkbSetMap request can trigger an out-of-bounds read, resulting in information disclosure.
Read more → -
ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability
Authentication is required to exploit the directory traversal remote code execution in SonicWall Secure Mobile Access.
Read more → -
ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability
Remote attackers can bypass authentication on FortiSandbox without credentials.
Read more → -
ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability
Authenticated remote attackers can cause a denial-of-service on FortiSandbox.
Read more → -
ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
The advisory notes that the NoMachine named pipe is assigned overly permissive permissions, enabling local privilege escalation.
Read more → -
ZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
The advisory notes that the flaw permits local privilege escalation on NoMachine. Exploitation requires prior low-privileged code execution.
Read more → -
ZDI-26-775: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability
Heap-based buffer overflow in GStreamer’s rtpL16depay element enables remote code execution.
Read more → -
ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
Unauthenticated remote code execution via a syslog format-string flaw on QNAP TS-453E devices.
Read more → -
ZDI-26-757: (0Day) Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability
Telegram's rlottie library has a numeric truncation flaw that can enable remote code execution when a user opens a crafted file or visits a malicious page.
Read more → -
CISA KEV — Palo Alto Networks PAN-OS (CVE-2026-0322) +3 more
Four CVEs—CVE-2026-0322, CVE-2026-76519, CVE-2026-105133, CVE-2026-105134—have been added to CISA’s KEV Catalog. They are flagged due to observed active exploitation.
Read more → -
Inductive Automation Ignition Software
The Ignition Perspective module can let an authenticated low-level user obtain Designer-level privileges.
Read more → -
CISA Urges Patching Newly Exploited Vulnerability in Ivanti Connect Secure
CISA added CVE-2026-104935 to its Known Exploited Vulnerabilities catalog.
Read more → -
CISA KEV — Microsoft Windows (CVE-2026-96951) +1 more
CVE-2026-96951 is a command-injection flaw in Microsoft Windows. CVE-2026-104935 is an authentication-bypass flaw in Ivanti Connect Secure.
Read more → -
Swann Communications SWIFI-SE2KIC
SWIFI-SE2KIC cameras with firmware ≤ 2.0.22 permit unauthenticated viewing of live video on the local network.
Read more → -
ZDI-26-756: (0Day) Genesis World load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Remote code execution is possible via deserialization of untrusted data in Genesis World's load_checkpoint library.
Read more → -
ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability
Remote code execution is possible via the decompress_usdz function in Genesis World.
Read more → -
ZDI-26-753: (0Day) Genesis World MJCF Directory Traversal Information Disclosure Vulnerability
The advisory reports a directory traversal in Genesis World's MJCF library that can disclose sensitive information.
Read more → -
ZDI-26-754: (0Day) Genesis World URDF Directory Traversal Information Disclosure Vulnerability
Remote attackers can disclose sensitive information via a directory traversal in Genesis World.
Read more → -
ZDI-26-755: (0Day) Genesis World glTF Server-Side Request Forgery Vulnerability
Genesis World’s glTF library is vulnerable to SSRF, enabling remote attackers to trigger arbitrary server-side requests.
Read more → -
2026-016: Critical Vulnerability in GitLab CE and EE
GitLab CE and EE versions before 19.4.2, 19.3.4, and 19.2.8 have a critical unauthenticated code execution vulnerability.
Read more → -
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
Actors are targeting Microsoft Exchange servers using multiple CVEs, including CVE-2021-22205.
Read more → -
Grid Protection Alliance openPDC and openHistorian
openPDC versions earlier than 2.9.482 and openHistorian versions earlier than 2.8.585 are listed as vulnerable. The advisory notes remote code execution is possible via deserialization of untrusted data.
Read more → -
Satel Netco Design
Satel Netco Design versions prior to v2.1.7 are vulnerable to stored cross-site scripting and a regex-based denial-of-service.
Read more → -
Red Lion Controls N-Tron 700 Series
The N-Tron 700 Series firmware ≤ 3.11.0 contains hard-coded credentials that allow administrative access.
Read more → -
2026-015: Critical Vulnerability in Multiple Atlassian Products
An arbitrary file access vulnerability is disclosed for multiple Atlassian Data Center products.
Read more → -
Hitachi Energy RTU500
RTU500 series CMU firmware versions 11.x and earlier are identified as vulnerable. These versions are end-of-life and no longer receive security updates.
Read more → -
Savannah lwIP SMTP client
The advisory reports a buffer overflow in Savannah lwIP SMTP client 2.2.1. A patch (patch_125_smtp_txbuf.diff) has been released.
Read more → -
Hitachi Energy SOI
SOI versions 2.0.0-2.2.0 contain an ActiveMQ code-injection flaw (CVE-2026-34197).
Read more → -
Johnson Controls EasyIO FG
EasyIO FG firmware up to version 2.0b52 contains hard-coded credentials and lacks a patch because the product is end-of-life. No firmware update will be released.
Read more → -
Hitachi Energy Asset Suite
Asset Suite versions 9.9.0 and earlier allow unauthenticated access to the HTTPPublishAdapterTestServlet. Upgrade to 9.9.1 or disable the servlet to mitigate.
Read more → -
Hitachi Energy REB500
REB500 versions 8.3.3.1 and earlier are vulnerable to denial-of-service via libexpat flaws.
Read more → -
CISA KEV — Citrix NetScaler (CVE-2026-88779)
CVE-2026-88779 targets Citrix NetScaler appliances and is listed as a known exploited vulnerability.
Read more → -
CISA KEV — Zammad GmbH Zammad Session Fixation (CVE-2026-102489) +1 more
CISA added CVE-2026-102489 and CVE-2026-102490 for Zammad to the KEV Catalog, indicating active exploitation.
Read more → -
CISA KEV — Fortinet FortiMail (CVE-2026-104286)
FortiMail path traversal vulnerability (CVE-2026-104286) has been added to CISA’s KEV catalog.
Read more → -
CISA Malcolm
Versions of CISA Malcolm earlier than 26.06.0 are listed as affected. The advisory reports that unauthenticated attackers can craft links that execute arbitrary script.
Read more → -
Johnson Controls EasyIO Neo Series EC and CW Controllers
Versions V3.3b62, V3.3b63, V3.3b24, and V3.3b25 transmit credentials and session data in cleartext.
Read more → -
ABB Protection and Control IED Manager PCM600
PCM600 versions up to 2.14 permit local users to elevate privileges via the Scheduler Service.
Read more → -
Meari IoT Cloud Platform OpenAPI Service
All versions of Meari IoT Cloud Platform OpenAPI Service are affected by missing-authorization vulnerabilities.
Read more → -
Johnson Controls EasyIO Neo Series EC and CW Controllers
Firmware versions V3.3b62, V3.3b63 (EC) and V3.3b24, V3.3b25 (CW) are identified as vulnerable.
Read more → -
Monta monta.app
All versions of Monta monta.app are affected. Unauthenticated WebSocket endpoints allow attackers to impersonate charging stations.
Read more → -
Armatura LLC Armatura One
Armatura One versions prior to 4.7.2 expose an unauthenticated ActiveMQ OpenWire listener.
Read more → -
ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
The advisory reports a TOCTOU privilege escalation flaw in the Windows dxgkrnl driver.
Read more → -
CISA Adds One Known Exploited Vulnerability to Catalog
Cisco Catalyst SD-WAN Manager is listed in CISA’s KEV catalog due to active exploitation of CVE-2026-76504.
Read more → -
ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution Vulnerability
Exploitation requires write access to the samld session directory.
Read more → -
ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution Vulnerability
Remote code execution is possible via a stack-based buffer overflow in WatchGuard FireWare OS's spamd statushdlr, but authentication is required.
Read more → -
CISA KEV — Apple Multiple Products (CVE-2026-86950)
CISA added CVE-2026-86950, an out-of-bounds write bug affecting multiple Apple products, to the KEV catalog. The advisory urges rapid remediation on publicly exposed assets.
Read more → -
Lantronix G520 Series Cellular Gateway
Lantronix G520 Series Cellular Gateway version 2.6.0.4R6_stable is vulnerable to remote code execution via its update mechanism.
Read more → -
Toptech TMS7 and TopHAT
Toptech TMS7 and TopHAT version 7.6.3 are vulnerable to unauthenticated database export. The vendor released version 7.8 that resolves the issues.
Read more → -
Viidure Dashcam Android Application
The advisory reports that the dashcam platform’s cloud storage bucket is publicly readable, exposing user data and firmware.
Read more → -
Anjvision YSSD-RTMP-H5
Firmware 3.3.2.4_build_2024-12-26 of the Anjvision YSSD-RTMP-H5 is listed as affected.
Read more → -
VIVOTEK Camera Firmware
Remote command execution with root privileges is possible on the listed VIVOTEK camera firmware versions.
Read more → -
MikroTik RouterOS
RouterOS versions prior to 7.24 contain an unauthenticated integer underflow in the web management service.
Read more → -
Baicells Nova 430H
Unauthenticated devices within radio range can send malformed uplink messages that may cause a denial-of-service condition on the eNodeB. The issue affects Nova 430H eNodeB firmware versions up to BaiBLQ_3.0.12.
Read more → -
2026-014: Critical Vulnerabilities in Citrix NetScaler ADC and Gateway
Two unauthenticated RCE vulnerabilities in Citrix NetScaler ADC and Gateway are confirmed to be exploited in the wild.
Read more → -
Critical Zero-Day Vulnerabilities Exploited in Citrix NetScaler ADC, Gateway
CVE-2026-88771 and CVE-2026-88772 are critical zero-day flaws in Citrix NetScaler ADC and Gateway that enable remote code execution.
Read more → -
CISA KEV — Citrix NetScaler (CVE-2026-88771) +1 more
Two Citrix NetScaler vulnerabilities (CVE-2026-88771 and CVE-2026-88772) have been added to CISA’s Known Exploited Vulnerabilities catalog.
Read more → -
CISA KEV — WordPress Core Remote File Inclusion (CVE-2026-87902)
WordPress core versions vulnerable to CVE-2026-87902 have been added to CISA’s KEV catalog. The vulnerability is a remote file inclusion that is actively exploited.
Read more → -
CISA KEV — Microsoft SharePoint (CVE-2026-65660) +1 more
Microsoft SharePoint and Mikrotik RouterOS have been added to the KEV catalog due to active exploitation.
Read more → -
CISA KEV — WSO2 Multiple Products (CVE-2026-5430) +1 more
CISA added CVE-2026-5430 (WSO2 path-traversal) and CVE-2026-71362 (Adobe Commerce/Magento incorrect-authorization) to its KEV Catalog.
Read more → -
Eufy Omni C20, Omni X10 Pro
Versions earlier than 1.6.4 of the Eufy Omni C20 and Omni X10 Pro are vulnerable to command injection and hard-coded credentials.
Read more → -
Botslab G980H Dashcams
Botslab G980H dashcams (firmware series 30010_QHG980HN5294SysFW+ and 58_QHG980HMCN5291SysFW+) are identified as vulnerable. The advisory notes multiple CVEs allowing authentication bypass and device manipulation.
Read more → -
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
The fact sheet advises applying the principle of least privilege to third-party ICS integrators.
Read more → -
ZDI-26-720: Foxit PDF Reader activeDocs Missing Authorization Information Disclosure Vulnerability
Foxit PDF Reader's activeDocs component can disclose sensitive information when a user opens a crafted file or visits a malicious page.
Read more → -
ZDI-26-721: Foxit PDF Reader U3D File Parsing Integer Overflow Remote Code Execution Vulnerability
An integer overflow in Foxit PDF Reader’s U3D parser can be triggered by opening a crafted PDF or visiting a malicious page.
Read more → -
ZDI-26-722: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
Exploitation requires the victim to open a crafted PDF or visit a malicious webpage.
Read more → -
ZDI-26-723: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Exploitation requires the victim to open a malicious PDF file or visit a crafted web page.
Read more → -
ZDI-26-724: Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
The vulnerability is a use-after-free in Foxit PDF Reader’s annotation handling that requires the victim to open a malicious PDF or visit a malicious page.
Read more → -
ZDI-26-725: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader contains a use-after-free that can disclose data, but exploitation requires a user to open a malicious PDF or visit a malicious page.
Read more → -
ZDI-26-726: Foxit PDF Reader Doc Object Use-After-Free Information Disclosure Vulnerability
Foxit PDF Reader contains a use-after-free information disclosure that requires user interaction.
Read more →
Page 1 of 12 · 1,153 advisories