radare
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| radare2 | 1 | – | Apr 16, 2026 |
Exploited and recent CVEs
- CVE-2026-41015 radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release) 1.2%