CVE-2025-56267

Avigilon ACM v7.10.0.20 is vulnerable to a CSV injection in the /id_profiles API endpoint. An attacker can exploit this by supplying a crafted Excel file to execute arbitrary code . As a temporary workaround, it is recommended to restrict access to the /id_profiles API endpoint until a formal fix...

PT-2025-36486

Name of the Vulnerable Software and Affected Versions: Avigilon ACM version 7.10.0.20 Description: A CSV injection vulnerability exists in the /id profiles API endpoint of the software. This allows attackers to execute arbitrary code by supplying a crafted Excel file. Recommendations: As a...

Avigilon ACM 安全漏洞

Avigilon ACM is a physical access control system from Avigilon USA. A security vulnerability exists in Avigilon ACM version v7.10.0.20, which originates from CSV injection and could lead to the execution of arbitrary code...