Skip to main content

Over 150 LLM Providers · Over 5,300 Models The most extensible AI-powered pentesting platform. Open source. Star on GitHub

Radare

17 known vulnerabilities

1
CRITICAL
6
HIGH
2
MEDIUM
8
LOW

Top Products

radare2 16 radare2 mcp server 1
17 CVEs
3.3
CVE-2026-14789

A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of t

3.3
CVE-2026-14788

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the funct

3.3
CVE-2026-14787

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/

3.3
CVE-2026-14786

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of th

3.3
CVE-2026-14761

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_

3.3
CVE-2026-14760

A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the f

3.3
CVE-2026-14759

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_c

3.3
CVE-2026-14758

A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode

5.3
CVE-2026-14757

A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file l

7.5
CVE-2026-8696

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that a

7.5
CVE-2026-8695

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers t

9.8
CVE-2026-6942

radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to exe

6.6
CVE-2026-6941

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to re

7.1
CVE-2026-6940

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recurs

7.8
CVE-2026-40517

radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows

7.8
CVE-2026-40527

radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted

7.8
CVE-2026-40499

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function tha

Frequently Asked Questions

How many CVEs affect Radare?

Radare has 17 CVE records in our database, including 1 critical and 6 high severity vulnerabilities.

What are the most severe Radare vulnerabilities?

Radare has 1 critical severity (CVSS 9.0+) and 6 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.

How can I scan for Radare vulnerabilities?

CyberStrike's AI-powered security agents automatically detect vulnerabilities in Radare products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.

Detect Radare Vulnerabilities

CyberStrike scans your infrastructure for Radare vulnerabilities and provides real-time remediation guidance.

Get Started