CVE-2025-59108

Published: Jan 26, 2026

Modified: Jan 26, 2026

PUBLISHED

By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced.

Vendor	Product	Versions
dormakaba	Access Manager 92xx-k5	affected `92xx-K5: All versions`
dormakaba	Access Manager 92xx-k7	affected `92xx-K7: <BAME 04.07.268`

technical-description

third-party-advisory

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.