Critical · 9.8 Scanner template CVE-2025-56266 EUVD-2025-27158GHSA-3664-c5jc-w4rv

A Host Header Injection vulnerability in Avigilon ACM v7.10.0.20 allows attackers to execute arbitrary code via supplying a crafted URL.

Published Sep 8, 2025 · Updated Sep 8, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Avigilon ACM - Host Header Injection http/cves/2025/CVE-2025-56266.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20/
https://github.com/nikolas-ch/CVEs/tree/main/AvigilonACM_v7.10.0.20/HostHeaderInjection
https://github.com/nikolas-ch/CVEs/blob/main/AvigilonACM_v7.10.0.20/HostHeaderInjection/HostHeaderInjection.txt