CVE-2025-14097

A vulnerability in the application software of multiple Radiometer products may allow remote code execution and unauthorized device management when specific internal conditions are met. Exploitation requires that a remote connection is established with additional information obtained through other means. The issue is caused by a weakness in the analyzer’s application software.                                                                                                                                                                                                Other related CVE's are CVE-2025-14095 & CVE-2025-14096.                                                                                                      Affected customers have been informed about this vulnerability. This CVE is being published to provide transparency. Required Configuration for Exposure: Affected application software version is in use and remote support feature is enabled in the analyzer.                                                                                                                                                                        Temporary work Around: If the network is not considered secure, please remove the analyzer from the network.                         Permanent solution: Customers should ensure the following: • The network is secure, and access follows best practices. Local Radiometer representatives will contact all affected customers to discuss a permanent solution.                                                      Exploit Status: Researchers have provided working proof-of-concept (PoC). Radiometer is not aware of any publicly available exploits at the time of this publication.

• CWE-287

• https://www.radiometer.com/myradiometer

Published

Dec 17, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14091A weakness has been identified in TrippWasTaken PHP-Guitar-S…7.3
• CVE-2025-14092A security vulnerability has been detected in Edimax BR-6478…7.2
• CVE-2025-14093A vulnerability was detected in Edimax BR-6478AC V3 1.0.15. …9.8
• CVE-2025-14094A flaw has been found in Edimax BR-6478AC V3 1.0.15. The aff…9.8
• CVE-2025-14095A "Privilege boundary violation" vulnerability is identified…6.8
• CVE-2025-14096A vulnerability exists in multiple Radiometer products that …8.4
• CVE-2025-14098Heap buffer out-of-bounds write vulnerability due to integer…7.8
• CVE-2025-1410The Events Calendar Made Simple – Pie Calendar plugin for Wo…5.4
• CVE-2025-14101Authorization Bypass Through User-Controlled Key vulnerabili…7.1
• CVE-2025-14103GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2025-14104A flaw was found in util-linux. This vulnerability allows a …6.1
• CVE-2025-14105A vulnerability was determined in TOZED ZLT M30S and ZLT M30…4.3