dormakaba
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Access Manager 92xx-k5 | 10 | – | Jan 26, 2026 |
| Access Manager 92xx-k7 | 8 | – | Jan 26, 2026 |
| Kaba exos 9300 | 7 | – | Jan 26, 2026 |
| dormakaba registration unit 9002 | 1 | – | Jan 26, 2026 |
| Dormakaba Saflok System 6000 | 1 | – | Dec 12, 2025 |
Exploited and recent CVEs
- CVE-2025-59109 UART Leaking Sensitive Data in dormakaba registration unit 9002 0.4%
- CVE-2025-59108 Weak Default Passwords in dormakaba access manager 0.4%
- CVE-2025-59108 Weak Default Passwords in dormakaba access manager 0.4%
- CVE-2025-59107 Static Firmware Encryption Password in dormakaba access manager 0.2%
- CVE-2025-59106 Web Server Running with Root Privileges in dormakaba access manager 0.8%
- CVE-2025-59105 Unencrypted Flash Storage in dormakaba access manager 0.1%
- CVE-2025-59105 Unencrypted Flash Storage in dormakaba access manager 0.1%
- CVE-2025-59104 Unlocked Bootloader in dormakaba access manager 0.2%
- CVE-2025-59103 Weak Default Passwords for SSH Access in dormakaba access manager 0.4%
- CVE-2025-59102 Secrets Stored in Plaintext in Database in dormakaba access manager 0.4%
- CVE-2025-59101 Insufficient Session Management in dormakaba access manager 0.8%
- CVE-2025-59101 Insufficient Session Management in dormakaba access manager 0.8%
- CVE-2025-59100 Unauthenticated Access to the SQLite Database in dormakaba access manager 0.8%
- CVE-2025-59099 Unauthenticated Path Traversal in dormakaba access manager 0.9%
- CVE-2025-59099 Unauthenticated Path Traversal in dormakaba access manager 0.9%
- CVE-2025-59098 Trace Functionality Leaking Sensitive Data in dormakaba access manager 0.4%
- CVE-2025-59098 Trace Functionality Leaking Sensitive Data in dormakaba access manager 0.4%
- CVE-2025-59097 Unauthenticated SOAP API in dormakaba access manager 0.7%
- CVE-2025-59097 Unauthenticated SOAP API in dormakaba access manager 0.7%
- CVE-2025-59096 Weak Default Password in dormakaba Kaba exos 9300 0.2%
- CVE-2025-59095 Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300 0.1%
- CVE-2025-59094 Local Privilege Escalation in dormakaba Kaba exos 9300 System management 0.2%
- CVE-2025-59093 Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300 0.2%
- CVE-2025-59092 Unauthenticated RPC Service in dormakaba Kaba exos 9300 0.9%
- CVE-2025-59091 Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300 0.9%
- CVE-2025-59090 Unauthenticated SOAP API in dormakaba Kaba exos 9300 1.2%
- CVE-2024-58311 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness 0.4%