<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: radiometrics</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-61956: Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin</title><link>https://patchthecve.com/cve/CVE-2025-61956.html</link><guid>https://patchthecve.com/cve/CVE-2025-61956.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>CRITICAL 10.0: Radiometrics VizAir is vulnerable to a lack of authentication mechanisms for critical functions, such as admin access and API requests. Attackers can modify configurations without authentication, potentially manipulating active runway settings and misleading air traffic control (ATC) and pilots. Add</description></item><item><title>CVE-2025-61945: Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system wi</title><link>https://patchthecve.com/cve/CVE-2025-61945.html</link><guid>https://patchthecve.com/cve/CVE-2025-61945.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>CRITICAL 10.0: Radiometrics VizAir is vulnerable to any remote attacker via access to the admin panel of the VizAir system without authentication. Once inside, the attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, which are essential for accurate weather f</description></item><item><title>CVE-2025-54863: Radiometrics VizAir is vulnerable to exposure of the system&#x27;s REST API key through a publicly accessible confi</title><link>https://patchthecve.com/cve/CVE-2025-54863.html</link><guid>https://patchthecve.com/cve/CVE-2025-54863.html</guid><pubDate>Sun, 18 Oct 2026 21:10:00 +0000</pubDate><description>CRITICAL 10.0: Radiometrics VizAir is vulnerable to exposure of the system&#x27;s REST API key through a publicly accessible configuration file. This allows attackers to remotely alter weather data and configurations, automate attacks against multiple instances, and extract sensitive meteorological data, which could po</description></item></channel></rss>