iDSecure vulnerabilities

3 known vulnerabilities in iDSecure from Control iD. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  iDSecure: NULL Pointer Dereference

  CVE-2026-92626Sep 16, 2026Control iD

  Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/dguardintegration/dguardVersion endpoint dereferences DGuard integration login state that may be unset, raising an unhandled null reference exception.

• 7.5 High severity

  iDSecure: Missing Authentication for Critical Functionality

  CVE-2026-92625Sep 16, 2026Control iD

  Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and re

• 9.8 Critical severity

  iDSecure: Improper Authentication

  CVE-2023-6329Nov 27, 2023Control iDEPSS 65%

  An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentica