Vulnerabilities (CVE)

Filtered by vendor Dormakabagroup Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-59106 1 Dormakabagroup 12 Dormakaba Access Manager 9200-k5, Dormakaba Access Manager 9200-k5 Firmware, Dormakaba Access Manager 9200-k7 and 9 more 2026-02-12 N/A 8.8 HIGH
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.