CVE-2025-49851

8.7 highEPSS 0.6%

High (8.7) in assaabloy control id idsecure. EPSS 0.6% chance of exploitation in the next 30 days.

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to an improper authentication vulnerability which could allow an attacker to bypass authentication and gain permissions in the product.

Severity

CVSS 4.0

8.7 high

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

assaabloy:control_id_idsecure

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-175-05

Check your stack JSON