Keysight vulnerabilities
We track 9 vulnerabilities in Keysight products across 11 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on August 4, 2026.
Latest Keysight vulnerabilities
- 9.8 Critical severity
Hawkeye: Stack-based Buffer Overflow
Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitrary code with administrative privileges.
- 7.5 High severity
Ixia Vision Product Family: Use of Hard-coded Cryptographic Key
Keysight Ixia Vision has an issue with hardcoded cryptographic material which may allow an attacker to intercept or decrypt payloads sent to the device via API calls or user authentication if the end user does not replace the TLS certificate that shipped with
- 7.2 High severity
Ixia Vision Product Family: Improper Limitation of a Pathname to a Restricted Directory
Path traversal may allow remote code execution using privileged account (requires device admin account, cannot be performed by a regular user). In combination with the 'Upload' functionality this could be used to execute an arbitrary script or possibly an uplo
- 7.8 High severity
N6845A Geolocation Server: Uncontrolled Search Path Element
In Keysight Geolocation Server v2.4.2 and prior, a low privileged attacker could create a local ZIP file containing a malicious script in any location. The attacker could abuse this to load a DLL with SYSTEM privileges.
- 7.8 High severity
N6845A Geolocation Server: Unrestricted Upload of File with Dangerous Type
In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM privileges due to an improper path validation, which could result in local privilege escalation or a denial
- 9.8 Critical severity
N6854A Geolocation Server: Deserialization of Untrusted Data
N6854A Geolocation Server versions 2.4.2 are vulnerable to untrusted data deserialization, which may allow a malicious actor to escalate privileges in the affected device’s default configuration and achieve remote code execution.
- 9.8 Critical severity
Keysight Technologies Sensor Management Server: Improper Neutralization of Special Elements used in an SQL Command
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip() method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC pa
- 9.8 Critical severity
Keysight Technologies Sensor Management Server: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor Management Server (SMS). This allows an unauthenticated remote attacker to upload arbitrary files to the SMS host.
- 9.8 Critical severity
N6854A Geolocation server and N6841A RF Sensor…: Deserialization of Untrusted Data
The affected products are vulnerable of untrusted data due to deserialization without prior authorization/authentication, which may allow an attacker to remotely execute arbitrary code.