dormakaba

Products

ProductCVEsExploitedLatest
Access Manager 92xx-k510–Jan 26, 2026
Access Manager 92xx-k78–Jan 26, 2026
Kaba exos 93007–Jan 26, 2026
dormakaba registration unit 90021–Jan 26, 2026
Dormakaba Saflok System 60001–Dec 12, 2025

Exploited and recent CVEs

  • CVE-2025-59109 Medium 5.1 UART Leaking Sensitive Data in dormakaba registration unit 9002 0.4%
  • CVE-2025-59108 Critical 9.2 Weak Default Passwords in dormakaba access manager 0.4%
  • CVE-2025-59108 Critical 9.2 Weak Default Passwords in dormakaba access manager 0.4%
  • CVE-2025-59107 High 8.5 Static Firmware Encryption Password in dormakaba access manager 0.2%
  • CVE-2025-59106 High 8.8 Web Server Running with Root Privileges in dormakaba access manager 0.8%
  • CVE-2025-59105 High 7.0 Unencrypted Flash Storage in dormakaba access manager 0.1%
  • CVE-2025-59105 High 7.0 Unencrypted Flash Storage in dormakaba access manager 0.1%
  • CVE-2025-59104 High 7.0 Unlocked Bootloader in dormakaba access manager 0.2%
  • CVE-2025-59103 Critical 9.2 Weak Default Passwords for SSH Access in dormakaba access manager 0.4%
  • CVE-2025-59102 Medium 6.9 Secrets Stored in Plaintext in Database in dormakaba access manager 0.4%
  • CVE-2025-59101 High 7.7 Insufficient Session Management in dormakaba access manager 0.8%
  • CVE-2025-59101 High 7.7 Insufficient Session Management in dormakaba access manager 0.8%
  • CVE-2025-59100 Medium 5.9 Unauthenticated Access to the SQLite Database in dormakaba access manager 0.8%
  • CVE-2025-59099 High 8.8 Unauthenticated Path Traversal in dormakaba access manager 0.9%
  • CVE-2025-59099 High 8.8 Unauthenticated Path Traversal in dormakaba access manager 0.9%
  • CVE-2025-59098 High 8.7 Trace Functionality Leaking Sensitive Data in dormakaba access manager 0.4%
  • CVE-2025-59098 High 8.7 Trace Functionality Leaking Sensitive Data in dormakaba access manager 0.4%
  • CVE-2025-59097 Critical 9.3 Unauthenticated SOAP API in dormakaba access manager 0.7%
  • CVE-2025-59097 Critical 9.3 Unauthenticated SOAP API in dormakaba access manager 0.7%
  • CVE-2025-59096 Medium 4.6 Weak Default Password in dormakaba Kaba exos 9300 0.2%
  • CVE-2025-59095 Medium 6.8 Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300 0.1%
  • CVE-2025-59094 High 8.4 Local Privilege Escalation in dormakaba Kaba exos 9300 System management 0.2%
  • CVE-2025-59093 High 8.5 Insecure Password Derivation Function for Database Administrator in dormakaba Kaba exos 9300 0.2%
  • CVE-2025-59092 High 8.7 Unauthenticated RPC Service in dormakaba Kaba exos 9300 0.9%
  • CVE-2025-59091 Critical 9.3 Hardcoded Legacy Accounts Allowing Control Over Access Managers in dormakaba Kaba exos 9300 0.9%
  • CVE-2025-59090 Critical 9.3 Unauthenticated SOAP API in dormakaba Kaba exos 9300 1.2%
  • CVE-2024-58311 Critical 9.8 Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness 0.4%