Security Advisories

Please send any reports regarding IT security in connection withto Seawing products to the following email address: psirt.seawing@assaabloy.com.

Identifier Title Date CVE CWE
SEAWING-SA-2026-01 SC-1000 WebConfig – OS command injection  2026-10-27 CVE-2026-97180   CWE-78: OS Command Injection  
SEAWING-SA-2026-02 SC 1000 Firmware – Legacy web interface remote code
execution vulnerability 
2026-10-27 CVE-2026-109618
 CVE-2026-109619 
CWE-416: Use After Free
CWE-755: Improper Handling of Exceptional Conditions
CWE-824: Access of Uninitialized Pointer
CWE-1325: Improperly Controlled Sequential Memory Allocation
CWE-1419: Incorrect Initialization of Resource