← Back

Dormakaba Access Manager 9290 K5 Firmware

dormakaba_access_manager_9290-k5_firmware

Vendor: Dormakabagroup • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-59106
1Dormakabagroup
6Dormakaba Access Manager 9200 K5 Firmware
Dormakaba Access Manager 9200 K7 FirmwareDormakaba Access Manager 9230 K5 Firmware+3 more
Jun 17, 2026
Jan 26, 2026
N/A· v4
8.8 HIGH· v3
N/A· v2
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the...Show more
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.Show less