Vulnerabilities (CVE)

Filtered by vendor Avigilon Subscribe
Filtered by product Access Control Manager
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-56266 1 Avigilon 1 Access Control Manager 2025-09-12 N/A 9.8 CRITICAL
A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.
CVE-2025-56267 1 Avigilon 1 Access Control Manager 2025-09-12 N/A 9.8 CRITICAL
A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file.