cisa.gov | Bulletins
Follow
Vulnerability Summary for the Week of May 26, 2025
Multiple vulnerabilities have been discovered in various products, including 1000 Projects Daily College Class Work Report Book, argoproj, Avast Business Antivirus, and Best Practical RT. These vulnerabilities can lead to SQL injection, cross-site scripting, and arbitrary actions on behalf of victims. Some of these vulnerabilities have been patched in newer versions, while others remain unpatched. The vulnerabilities have been assigned CVSS scores ranging from 7.2 to 9.8, indicating high to critical severity. The affected products include Avast Business Antivirus, Best Practical RT, and Consilium Safety CS5000 Fire Panel. Some of these products can be exploited remotely, allowing attackers to perform arbitrary actions, spoof or tamper with update files, and leak secret access tokens. The vulnerabilities have been disclosed to the public and may be used by attackers. Patches have been released for some of the vulnerabilities, while others require users to take alternative measures to mitigate the risks.