CVE-2025-71326Disclosure

MEDIUMCVSS 8.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that execute with high-level system permissions.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-428

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC and exploit tooling are both present
Patch or workaround signal is available
7 mentions across 4 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 2 signals
PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 6 signals
Disclosure: 5 classified signals
Peaked 3d ago at 3 mentions (2026-06-19); latest day: 1
7 total mentions across 4 days

Deep dive

Activity timeline7 mentions / 4d

Signal classification2 categories

Disclosure

571.4%

PoC

228.6%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-19	3	Disclosure3
2026-06-22	2	PoC2
2026-07-02	1	Disclosure1
2026-09-17	1	Disclosure1

Full discourse7 posts

CSIRT Italia@csirt_it134d
PoC
‼️ #Avast: disponibile Proof of Concept (#PoC) per la vulnerabilità CVE-2025-71326 presente nel noto antivirus Rischio: 🔴 Tipologia: 🔸 Arbitrary Code Execution 🔸 Privilege Escalation 🔗 https://www.acn.gov.it/portale/w/avast-disponibile-poc-pubblico-per-la-cve-2025-71326 ⚠ Importante mantenere aggiornati i sistemi https://t.co/UwQdTNQmye
Post summary
A Proof of Concept for CVE‑2025‑71326 affecting Avast antivirus has been released, enabling arbitrary code execution and privilege escalation; users are advised to keep their systems updated to mitigate the risk.
00040803
9.0K followersView on X
ℰ𝓍𝟹℘𝓉𝒾ℴ𝓃𝒶ℒ@Ex3ptionaL133747d
Disclosure
CVE-2025-71326: Unquoted Search Path or Element Link: https://www.rapid7.com/db/vulnerabilities/cve-2025-71326/ https://t.co/quAylD5Iyl
Post summary
The text announces CVE-2025-71326 (Unquoted Search Path vulnerability) with minimal context, providing only the vulnerability type and a generic link. No exploit, patch, or active exploitation details are included.
0000071
55 followersView on X
CERT-PY@CERTpy124d
Disclosure
⚠️ Vulnerabilidad en productos Avast ❗ CVE-2025-71326 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-avast/ https://t.co/CnZ0bZFiPg
Post summary
The tweet announces a new vulnerability (CVE-2025-71326) in Avast products and directs readers to a link for more information.
00000190
6.7K followersView on X
Hephaestvs@Vulcanux_134d
PoC
csirt_it: ‼️ #Avast: disponibile Proof of Concept (#PoC) per la vulnerabilità CVE-2025-71326 presente nel noto antivirus Rischio: 🔴 Tipologia: 🔸 Arbitrary Code Execution 🔸 Privilege Escalation 🔗 https://www.acn.gov.it/portale/w/avast-disponibile-poc-pubblico-per-la-cve-2025-71326 ⚠ Importante mantenere agg… https://t.co/MMxtbNDX5k
Post summary
The tweet announces a publicly available Proof of Concept for CVE‑2025‑71326, detailing that it enables arbitrary code execution and privilege escalation, without indicating active exploitation or a patch.
0000092
620 followersView on X
Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2025-71326 AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated S… https://www.cve.org/CVERecord?id=CVE-2025-71326 ----- Traducción: CVE-2025-71326 AVA… http://infoflow.cloud`
Post summary
The post announces CVE‑2025‑71326, describing an unquoted service path vulnerability in AVAST’s SecureLine service that enables local privilege escalation.
0000068
82 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2025-71326 AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated S… https://www.cve.org/CVERecord?id=CVE-2025-71326
Post summary
The statement announces a new CVE (CVE‑2025‑71326) describing an unquoted service path vulnerability in Avast Antivirus that enables local privilege escalation, with no PoC, exploit, or patch information provided.
00000245
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2025-71326 Unquoted Service Path Privilege Escalation in AVAST Antivirus 25.11 SecureLine https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71326
Post summary
A new privilege‑escalation CVE‑2025‑71326 has been disclosed for AVAST Antivirus 25.11 SecureLine via an unquoted service path; no PoC, exploitation, or patch information is included.
0000075
4.1K followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2025-71326

CSIRT Italia@csirt_itPoC

A Proof of Concept for CVE‑2025‑71326 affecting Avast antivirus has been released, enabling arbitrary code execution and privilege escalation; users are advised to keep their systems updated to mitigate the risk.

ℰ𝓍𝟹℘𝓉𝒾ℴ𝓃𝒶ℒ@Ex3ptionaL1337Disclosure

The text announces CVE-2025-71326 (Unquoted Search Path vulnerability) with minimal context, providing only the vulnerability type and a generic link. No exploit, patch, or active exploitation details are included.

CERT-PY@CERTpyDisclosure

The tweet announces a new vulnerability (CVE-2025-71326) in Avast products and directs readers to a link for more information.

Hephaestvs@Vulcanux_PoC

The tweet announces a publicly available Proof of Concept for CVE‑2025‑71326, detailing that it enables arbitrary code execution and privilege escalation, without indicating active exploitation or a patch.

Infoflowcloud@infoflowcloudDisclosure

The post announces CVE‑2025‑71326, describing an unquoted service path vulnerability in AVAST’s SecureLine service that enables local privilege escalation.

CVE@CVEnewDisclosure

The statement announces a new CVE (CVE‑2025‑71326) describing an unquoted service path vulnerability in Avast Antivirus that enables local privilege escalation, with no PoC, exploit, or patch information provided.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new privilege‑escalation CVE‑2025‑71326 has been disclosed for AVAST Antivirus 25.11 SecureLine via an unquoted service path; no PoC, exploitation, or patch information is included.