HIGH 7.5 NVD

CVE-2026-92625

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable with

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated batch script. An unauthenticated remote attacker can call this endpoint repeatedly to hold the service in a continuous restart cycle, rendering it unavailable.

References

https://www.tenable.com/security/research/tra-2026-56

Published: 2026-09-16 · Source: NVD · Feed updated: 2026-09-16

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-09-16 via NVD.

vulnfeed aggregates 14391 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.