CVE-2025-54863

Radiometrics VizAir is vulnerable to exposure of the system's REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could potentially compromise airport operations. Additionally, attackers could flood the system with false alerts, leading to a denial-of-service condition and significant disruption to airport operations. Unauthorized remote control over aviation weather monitoring and data manipulation could result in incorrect flight planning and hazardous takeoff and landing conditions.

• CWE-522

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-308-04.jsonThird Party Advisory
• https://www.cisa.gov/news-events/ics-advisories/icsa-25-308-04Mitigation, Third Party Advisory, US Government Resource

Published

Nov 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-54858When a BIG-IP Advanced WAF or BIG-IP ASM Security Policy is …8.7
• CVE-2025-54859Stored cross-site scripting (XSS) vulnerability in desknet's…4.8
• CVE-2025-5486The WP Email Debug plugin for WordPress is vulnerable to pri…9.8
• CVE-2025-54860Cognex In-Sight Explorer and In-Sight Camera Firmware expose…7.7
• CVE-2025-54861A reflected cross-site scripting (xss) vulnerability exists …5.4
• CVE-2025-54862Sante PACS Server web portal is vulnerable to stored cross-s…5.4
• CVE-2025-54864Hydra is a continuous integration service for Nix based proj…7.5
• CVE-2025-54865Tilesheets MediaWiki Extension adds a table lookup parser fu…9.8
• CVE-2025-54866Wazuh is a free and open source platform used for threat pre…5.5
• CVE-2025-54867Youki is a container runtime written in Rust. Prior to versi…7
• CVE-2025-54868LibreChat is a ChatGPT clone with additional features. In ve…7.5
• CVE-2025-54869FPDI is a collection of PHP classes that facilitate reading …6