CVE-2025-54863

CVE-2025-54863 is a critical vulnerability affecting Radiometrics VizAir, where a publicly accessible configuration file exposes the system's REST API key. This allows unauthenticated remote attackers to alter weather data and configurations, extract sensitive meteorological data, and potentially cause a denial-of-service by flooding the system with false alerts. With a CVSS score of 9.8 (Critical), the vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability, posing significant risks to airport operations and flight safety. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion with 11 mentions, indicating awareness and potential future interest.