CVE-2025-61956

CVE-2025-61956 is a critical authentication bypass vulnerability affecting Radiometrics VizAir, an aviation weather system. This flaw allows unauthenticated attackers to modify critical configurations, including active runway settings and meteorological data, potentially misleading air traffic control and pilots. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion.