Unauthenticated Denial of Service in Control iD iDSecure by Control iD
CVE-2026-92626

7.5HIGH

Key Information:

Vendor

Control Id

Status
Idsecure
Vendor
CVE Published:
16 September 2026

What is CVE-2026-92626?

Control iD's iDSecure prior to version 4.8.3.0 contains a flaw in the /api/dguardintegration/dguardVersion endpoint, where an unauthenticated Denial of Service vulnerability exists due to improper handling of the DGuard integration login state. This can result in an unhandled null reference exception being thrown. Since the exception originates from an asynchronous method that does not return a response to the caller, it may lead to unexpected termination of the iDSecure process, impacting system availability.

Affected Version(s)

iDSecure 0 < 4.8.3.0

References

https://www.tenable.com/security/research/tra-2026-56

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.