Swegon security advisories
When a vulnerability affects a released Swegon product and customers need to act, Swegon publishes a security advisory. It names the affected products and versions, the severity and potential impact, the mitigation or fix, and a CVE reference where one exists. Swegon publishes advisories in the same channels as each product's software updates and documentation, and lists them here. Where an incident or an actively exploited vulnerability could affect customers, Swegon informs the affected users it can identify directly, and all users through those channels.
A security notice is different: it describes a risk in how equipment is installed or exposed, across products, and what to do about it. It carries no CVE.
Found a vulnerability? Report it under the Swegon Vulnerability Disclosure Policy.
Security notices
| Issued | Notice | Applies to | Status |
|---|---|---|---|
| 2026-10-21 | Control equipment safeguards, also in Swedish | All connected control equipment reachable from the internet | Active |
Security advisories
Swegon has no security advisories published at the moment. When a vulnerability affects a released product and customers need to act, the advisory appears here, and each entry links to its full detail, including the mitigation or fix.
Prepared in advance. For the one weakness the notice above already covers, shared factory passwords in older control software, the advisory is written and will be published here as soon as the affected products and versions are confirmed. If Swegon learns before then that the weakness is being exploited, it publishes the advisory at once with what it knows, and informs directly the affected users it can identify.
For a specific product or service, its own documentation, its Security & Trust Overview where published, and any direct notification from Swegon take precedence over this list.
Last reviewed 4 November 2026.