<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: assaabloy</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-3315: Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for </title><link>https://patchthecve.com/cve/CVE-2026-3315.html</link><guid>https://patchthecve.com/cve/CVE-2026-3315.html</guid><pubDate>Wed, 17 Jun 2026 10:43:23 +0000</pubDate><description>HIGH 7.8: Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affects Visionline: from 1.0 before 1.33.</description></item><item><title>CVE-2025-49853: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow </title><link>https://patchthecve.com/cve/CVE-2025-49853.html</link><guid>https://patchthecve.com/cve/CVE-2025-49853.html</guid><pubDate>Wed, 17 Jun 2026 09:32:01 +0000</pubDate><description>CRITICAL 9.1: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries.</description></item><item><title>CVE-2025-49852: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vul</title><link>https://patchthecve.com/cve/CVE-2025-49852.html</link><guid>https://patchthecve.com/cve/CVE-2025-49852.html</guid><pubDate>Wed, 17 Jun 2026 09:32:01 +0000</pubDate><description>HIGH 7.5: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to a server-side request forgery vulnerability which could allow an unauthenticated attacker to retrieve information from other servers.</description></item><item><title>CVE-2025-49851: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulner</title><link>https://patchthecve.com/cve/CVE-2025-49851.html</link><guid>https://patchthecve.com/cve/CVE-2025-49851.html</guid><pubDate>Wed, 17 Jun 2026 09:32:01 +0000</pubDate><description>CRITICAL 9.8: ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.</description></item><item><title>CVE-2025-2125: A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic</title><link>https://patchthecve.com/cve/CVE-2025-2125.html</link><guid>https://patchthecve.com/cve/CVE-2025-2125.html</guid><pubDate>Wed, 17 Jun 2026 09:06:22 +0000</pubDate><description>MEDIUM 4.3: A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovante_marcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of re</description></item></channel></rss>