Skip to content
Threat Feed
Subscribe

Product

Radar (< 1.12.2)

1 brief RSS
high advisory

Authorization Bypass in Radar handleLocalTerminal Endpoint

Radar versions prior to 1.12.2 contain a missing authorization vulnerability allowing attackers to execute commands via the /api/local-terminal WebSocket endpoint.

Radar cve-2026-82026 remote-code-execution authorization-bypass
2t 1c