Radiometrics vulnerabilities
We track 3 vulnerabilities in Radiometrics products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2025.
Latest Radiometrics vulnerabilities
- 9.8 Critical severity
VizAir: Missing Authentication for Critical Functionality
Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading a
- 9.8 Critical severity
VizAir: Missing Authentication for Critical Functionality
Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, wh
- 9.8 Critical severity
VizAir: Insufficiently Protected Credentials
Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensi