CVE-2025-14096

A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system. Other related CVE's are CVE-2025-14095 & CVE-2025-14097. Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency. Required Configuration for Exposure: Attacker requires physical access to the analyzer. Temporary work Around: Only authorized people can physically access the analyzer. Permanent solution: Local Radiometer representatives will contact all affected customers to discuss a permanent solution. Exploit Status: Researchers have provided a working proof-of-concept (PoC). Radiometer is not aware of any public exploit code at the time of this publication.

• CWE-250
• CWE-798

• https://www.radiometer.com/myradiometer

Published

Dec 17, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14090A security flaw has been discovered in AMTT Hotel Broadband …7.2
• CVE-2025-14091A weakness has been identified in TrippWasTaken PHP-Guitar-S…7.3
• CVE-2025-14092A security vulnerability has been detected in Edimax BR-6478…7.2
• CVE-2025-14093A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. …9.8
• CVE-2025-14094A flaw has been found in Edimax BR-6478AC V3 1.0.15. The aff…9.8
• CVE-2025-14095A "Privilege boundary violation" vulnerability is identified…6.8
• CVE-2025-14097A vulnerability in the application software of multiple Radi…7.2
• CVE-2025-14098Heap buffer out-of-bounds write vulnerability due to integer…7.8
• CVE-2025-1410The Events Calendar Made Simple – Pie Calendar plugin for Wo…5.4
• CVE-2025-14101Authorization Bypass Through User-Controlled Key vulnerabili…7.1
• CVE-2025-14103GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2025-14104A flaw was found in util-linux. This vulnerability allows a …6.1