Dormakaba vulnerabilities

Products

• Access Manager 92xx-k5 10
• Access Manager 92xx-k7 8
• Kaba Exos 9300 7

Newest

• dormakaba registration unit 9002 UART Leaking Sensitive Data in dormakaba registration unit 9002 CVE-2025-59109 5.1 MediumJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Weak Default Passwords in dormakaba access manager CVE-2025-59108 9.2 CriticalJanuary 26, 2026
• dormakaba access manager 92xx-k5 Static Firmware Encryption Password in dormakaba access manager CVE-2025-59107 8.5 HighJanuary 26, 2026
• dormakaba access manager 92xx-k7, dormakabagroup dormakaba access manager 9200-k5 firmware, dormakaba access manager 9200-k7 firmware +4 more +6 more Web Server Running with Root Privileges in dormakaba access manager CVE-2025-59106 8.8 HighJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Unencrypted Flash Storage in dormakaba access manager CVE-2025-59105 7.0 HighJanuary 26, 2026
• dormakaba access manager 92xx-k7 Unlocked Bootloader in dormakaba access manager CVE-2025-59104 7.0 HighJanuary 26, 2026
• dormakaba access manager 92xx-k5 Weak Default Passwords for SSH Access in dormakaba access manager CVE-2025-59103 9.2 CriticalJanuary 26, 2026
• dormakaba access manager 92xx-k5 Secrets Stored in Plaintext in Database in dormakaba access manager CVE-2025-59102 6.9 MediumJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Insufficient Session Management in dormakaba access manager CVE-2025-59101 7.7 HighJanuary 26, 2026
• dormakaba access manager 92xx-k5 Unauthenticated Access to the SQLite Database in dormakaba access manager CVE-2025-59100 5.9 MediumJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Unauthenticated Path Traversal in dormakaba access manager CVE-2025-59099 8.8 HighJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Trace Functionality Leaking Sensitive Data in dormakaba access manager CVE-2025-59098 8.7 HighJanuary 26, 2026
• dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 more Unauthenticated SOAP API in dormakaba access manager CVE-2025-59097 9.3 CriticalJanuary 26, 2026
• dormakaba kaba exos 9300 Weak Default Password in dormakaba Kaba exos 9300 CVE-2025-59096 4.6 MediumJanuary 26, 2026
• dormakaba kaba exos 9300 Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300 CVE-2025-59095 6.8 MediumJanuary 26, 2026
• dormakaba kaba exos 9300 Local Privilege Escalation in dormakaba Kaba exos 9300 System management CVE-2025-59094 8.4 HighJanuary 26, 2026
• dormakaba kaba exos 9300 Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300 CVE-2025-59093 8.5 HighJanuary 26, 2026
• dormakaba kaba exos 9300 Unauthenticated RPC Service in dormakaba Kaba exos 9300 CVE-2025-59092 8.7 HighJanuary 26, 2026
• dormakaba kaba exos 9300 Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300 CVE-2025-59091 9.3 CriticalJanuary 26, 2026
• dormakaba kaba exos 9300 Unauthenticated SOAP API in dormakaba Kaba exos 9300 CVE-2025-59090 9.3 CriticalJanuary 26, 2026
• dormakaba saflok system 6000 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness CVE-2024-58311 8.7 HighDecember 12, 2025
• dormakaba confidant firmware, quantum firmware, saffire firmware +2 more +4 more The dormakaba Saflok system before the November 2023 software update allows an attacker to unlock... CVE-2024-29916 5.6 MediumMarch 21, 2024