CVE-2025-61945: vizair before 2025-08 (exclusive); +1 more affected products

CVE-2025-61945. CVSS 3.1 base score 9.8 (CRITICAL, NVD). EPSS 0.00769 (percentile 0.54766), scored 17-Oct-2026.

Affected technology

vizair · before 2025-08 (exclusive)
radiometrics

VizAir · 0 to before 08/2025
Radiometrics

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The attacker can modify critical weather parameters such as wind shear alerts, inversion depth, and CAPE values, which are essential for accurate weather forecasting and flight safety. Vendor/CNA’s CVSS 4.0 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high.

Published 18-Oct-2026 22:51 UTC

CWE: CWE-306
CCR priority: 39.4 /100 (P4)
CVSS 3.1: 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS: 0.00769 · percentile 0.54766 · 2026-10-17
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-18 22:50:08.248207+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2025-61945.html