Control iD vulnerabilities
We track 5 vulnerabilities in Control iD products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2026.
Latest Control iD vulnerabilities
- 7.5 High severity
iDSecure: NULL Pointer Dereference
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception.
- 7.5 High severity
iDSecure: Missing Authentication for Critical Functionality
Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and re
- 9.8 Critical severity
iDSecure: Improper Authentication
An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentica
- 9.8 Critical severity
RHiD: Direct Request
A vulnerability classified as critical has been found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/#/. The manipulation leads to direct request. It is possible to initiate the attack remotely. The associated identifier of this vul
- 9.8 Critical severity
RHiD: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. I