radareorg radare2

Name: radareorg radare2
Brand: radareorg

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

3critical8high3medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-15121US	critical9.6	1.57% (75th)	—	no fix	2020-07-20	≤ < 4.5.0
CVE-2026-40499US	high7.8	1.18% (68th)	—	6.1.4	2026-04-15	0 → 6.1.4
CVE-2026-40517US	—	1.05% (64th)	—	6.1.4	2026-04-22	0 → 6.1.4
CVE-2026-40527US	—	0.92% (60th)	—	bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683	2026-04-17	0 → bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683
CVE-2025-1744US	critical9.8	0.51% (43rd)	—	<5.9.9	2025-02-28	0 → <5.9.9
CVE-2025-1864US	critical9.8	0.48% (41st)	—	<5.9.9	2025-03-03	0 → <5.9.9
CVE-2026-6941US	high7.8	0.22% (13th)	—	6.1.4	2026-04-23	0 → 6.1.4
CVE-2026-14789US	high7.8	0.22% (13th)	—	no fix	2026-07-06	7 versions
CVE-2026-14759US	high7.8	0.22% (13th)	—	no fix	2026-07-05	7 versions
CVE-2026-6940US	—	0.22% (12th)	—	6.1.4	2026-04-23	0 → 6.1.4
CVE-2026-14757US	high7.8	0.21% (11th)	—	no fix	2026-07-05	7 versions
CVE-2026-14787US	high7.8	0.21% (10th)	—	no fix	2026-07-06	7 versions
CVE-2026-14788US	high7.8	0.20% (10th)	—	no fix	2026-07-06	7 versions
CVE-2026-14760US	high7.8	0.20% (10th)	—	no fix	2026-07-05	7 versions
CVE-2026-14786US	medium5.5	0.19% (8th)	—	no fix	2026-07-06	7 versions
CVE-2026-14761US	medium5.5	0.19% (8th)	—	no fix	2026-07-05	7 versions
CVE-2026-14758US	medium5.5	0.19% (8th)	—	no fix	2026-07-05	7 versions

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer5 CVEs
CWE-189CWE-1895 CVEs
CWE-190Integer Overflow or Wraparound5 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-416Use After Free2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.