PatchTheCVEassaabloy vulnerabilities
Recent CVEs affecting assaabloy products. 5 tracked.
assaabloy has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-03-10. Highest priority: CVE-2025-49851 (score 51/100).
- CVE-2026-3315 HIGH 7.8 UPGRADE Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for
- CVE-2025-49853 CRITICAL 9.1 UPGRADE ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow
- CVE-2025-49852 HIGH 7.5 UPGRADE ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vul
- CVE-2025-49851 CRITICAL 9.8 UPGRADE ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulner
- CVE-2025-2125 MEDIUM 4.3 DOWNGRADE A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic
FAQ
How do I fix assaabloy vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is assaabloy being exploited right now?
None of the tracked assaabloy CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which assaabloy CVE should I patch first?
CVE-2025-49851 currently ranks highest (51/100): ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulner.