Threats tagged 'ghsa-p4q9-wr86-5gjc'

Radiometrics VizAir has a critical vulnerability (CVE-2025-54863) where the system's REST API key is exposed via a publicly accessible configuration file. This exposure allows attackers to remotely manipulate weather data and configurations, automate attacks on multiple instances, extract sensitive meteorological data, and flood the system with false alerts. Such actions could disrupt airport operations, cause denial-of-service conditions, and lead to hazardous flight conditions due to incorrect weather information.