PT-2026-24197 · Assa Abloy · Assa Abloy Visionline

Published 2026-03-10 · Updated 2026-05-07 · CVE-2026-3315

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASSA ABLOY Visionline versions prior to 1.33

Description An issue exists in ASSA ABLOY Visionline that allows for configuration or environment manipulation due to incorrect default permissions, leading to execution with unnecessary privileges and incorrect permission assignment for critical resources.

Recommendations Update ASSA ABLOY Visionline to version 1.33 or later.

Fix

Incorrect Permission

Incorrect Default Permissions

Weakness Enumeration

CWE-250

CWE-732

CWE-276

Related Identifiers

CVE-2026-3315

Affected Products

Assa Abloy Visionline

References · 9

• https://vingcard.com/en/service-and-support/product-security-center/hospitality-product-security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-3315 · Security Note
• https://t.me/cveNotify/162634 · Telegram Post
• https://t.me/CVEtracker/47000 · Telegram Post
• https://t.me/cveNotify/155044 · Telegram Post
• https://twitter.com/CVEnew/status/2031330624544583693 · Twitter Post
• https://https//www.vingcard.com/en/service-and-support/product-security-center · Note
• https://twitter.com/infoflowcloud/status/2031332073386955053 · Twitter Post
• https://twitter.com/cyberbivash/status/2031350551456227398 · Twitter Post