CVE-2025-49851

CVE-2025-49851 is a critical improper authentication vulnerability affecting ControlID iDSecure On-premises versions 4.7.48.0 and prior. This flaw allows an unauthenticated attacker to bypass authentication and gain full control over the product, as indicated by its CVSS score of 9.8 (Critical). While there is no known public exploit code or active exploitation, the vulnerability has garnered some community discussion, suggesting awareness among security researchers. Organizations using affected versions should prioritize patching to mitigate the significant risk of unauthorized access and system compromise.