Advisories · Technology

dormakaba Access Manager 92xx-k7.

Every CVE that names dormakaba Access Manager 92xx-k7 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-59108 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

Weak Default Passwords in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- CWE-1392
Not analysed yet 26 Jan 2026
CVE-2025-59106 CVE record

CVSS 8.8 High

Web Server Running with Root Privileges in dormakaba access manager
- dormakaba Access Manager 92xx-k7
- CWE-272
Not analysed yet 26 Jan 2026
CVE-2025-59105 CVE record

CVSS 7.0 High

Unencrypted Flash Storage in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Information disclosure
Not analysed yet 26 Jan 2026
CVE-2025-59104 CVE record

CVSS 7.0 High

Unlocked Bootloader in dormakaba access manager
- dormakaba Access Manager 92xx-k7
- CWE-1234
Not analysed yet 26 Jan 2026
CVE-2025-59101 CVE record

CVSS 7.7 High

Insufficient Session Management in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- CWE-291
Not analysed yet 26 Jan 2026
CVE-2025-59099 CVE record

CVSS 8.8 High

Unauthenticated Path Traversal in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Path traversal
Not analysed yet 26 Jan 2026
CVE-2025-59098 CVE record

CVSS 8.7 High

Trace Functionality Leaking Sensitive Data in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Information disclosure
Not analysed yet 26 Jan 2026
CVE-2025-59097 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Unauthenticated SOAP API in dormakaba access manager
- dormakaba Access Manager 92xx-k5
- dormakaba Access Manager 92xx-k7
- Authentication bypass
- CWE-1188
Not analysed yet 26 Jan 2026