CVE-2019-25269: netgate amiti_antivirus Unquoted Search Path or Element
Vulnerability summary
CVE-2019-25269 is a high (CVSS 8.5) Unquoted Search Path or Element vulnerability in netgate amiti_antivirus. EPSS estimates a 0.37% chance of exploitation in the next 30 days, higher than 29.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 04-02-2026PublishedVulnerability first disclosed.
- 06-02-2026Last modifiedVulnerability information updated.
Description
Amiti Antivirus 25.0.640 contains an unquoted service path vulnerability in its Windows service configurations. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges by placing executable files in specific directory locations.
CVSS metrics
4 scores · 2 sources · 2 versions- NVDNIST8.5HighCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.37%
Chance of exploitation in the next 30 days
Percentile
30%
Versus all other CVEs
30-day change
+0.03 pp
From 0.34% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundAmiti Antivirus 25.0.640 - Unquoted Service Path
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Netgate1 product
- amiti_antivirus25.0.640
1 vendor · 1 product
References
3 links- www.netgate.skProduct
- www.vulncheck.com/advisories/amiti-antivirus-unquoted-service-path-vulnerabilityThird Party Advisory