avigilon vulnerabilities

Products

• access control manager 2
• avigilon control center 1
• VideoIQ iCVR HD camera 1
• videolq icvr hd camera 1

Latest avigilon CVEs

Newest publication first

1. CVE-2025-56266 A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

   Published 2025-09-08

   Critical·CVSS 9.8 EPSS 3.0%

   A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

2. CVE-2025-56267 A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file.

   Published 2025-09-08

   Critical·CVSS 9.8 EPSS 0.75%

   A CSV injection vulnerability in the /id_profiles endpoint of Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via suuplying a crafted Excel file.

3. CVE-2024-45253 Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

   Published 2024-11-14

   High·CVSS 7.5 EPSS 0.52%

   Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

4. CVE-2015-2860 Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

   Published 2015-06-23

   High·CVSS 7.8 EPSS 2.7%

   Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read arbitrary files via a crafted help/ URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.