Dormakaba
20 CVEs tracked since 2026. Since Jan 2026, none of them reached CISA KEV.
Dormakaba CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2026-01 | 20 | 0 |
Products
The products that kept showing up in Dormakaba's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Dormakaba.
- CVE-2025-59109UART Leaking Sensitive Data in dormakaba registration unit 9002—
- CVE-2025-59108Weak Default Passwords in dormakaba access manager—
- CVE-2025-59107Static Firmware Encryption Password in dormakaba access manager—
- CVE-2025-59106Web Server Running with Root Privileges in dormakaba access manager8.8
- CVE-2025-59105Unencrypted Flash Storage in dormakaba access manager—
- CVE-2025-59104Unlocked Bootloader in dormakaba access manager—
- CVE-2025-59103Weak Default Passwords for SSH Access in dormakaba access manager—
- CVE-2025-59102Secrets Stored in Plaintext in Database in dormakaba access manager—
- CVE-2025-59101Insufficient Session Management in dormakaba access manager—
- CVE-2025-59100Unauthenticated Access to the SQLite Database in dormakaba access manager—
- CVE-2025-59099Unauthenticated Path Traversal in dormakaba access manager—
- CVE-2025-59098Trace Functionality Leaking Sensitive Data in dormakaba access manager—
- CVE-2025-59097Unauthenticated SOAP API in dormakaba access manager—
- CVE-2025-59096Weak Default Password in dormakaba Kaba exos 9300—
- CVE-2025-59095Hard-coded Key for PIN Encryption in dormakaba Kaba exos 9300—
The record
- Peak rank
- #41 in Jan 2026
- Busiest month shown
- Jan 2026, 20 CVEs
- Months with a KEV entry
- 0 since Jan 2026
- Monthly snapshots
- 1 since 2026