CVE Intelligence

Dormakabagroup Dormakaba Access Manager 9290-k5 Firmware vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dormakabagroup Dormakaba Access Manager 9290-k5 Firmware: 1 record(s), with affected versions and fixes.
cpe:2.3:o:dormakabagroup:dormakaba_access_manager_9290-k5_firmware

CVE-2025-59106 High · 8.8 CWE-272 Jan 26, 2026
Web Server Running with Root Privileges in dormakaba access manager
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.