PT-2026-4747 · Dormakaba · Access Managers 9230+5

Published 2026-01-26 · Updated 2026-01-26 · CVE-2025-59097

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions dormakaba exos 9300 (affected versions not specified)

Description The exos 9300 application, used to configure Access Managers (e.g., 92xx, 9230, and 9290), transmits configuration data via SOAP requests without default authentication or authorization. While authentication via IPsec (for 92xx-K5 devices) and mTLS (for 92xx-K7 devices) is possible, it is not enabled by default and requires additional configuration. This allows an attacker with network access to completely control the environment, including reconfiguring Access Managers, modifying inputs and outputs, opening doors, changing admin passwords, and more. Network access can be gained through insufficient network segmentation or missing LAN firewalls, with some devices identified as directly exposed to the internet.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-1188

CWE-306

Related Identifiers

CVE-2025-59097

Affected Products

92Xx-K5

92Xx-K7

Access Managers 9230

Access Managers 9290

Access Managers 92Xx

Dormakaba Exos 9300

References · 8

• https://dormakabagroup.com/en/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59097 · Security Note
• https://r.sec-consult.com/dormakaba · Note
• https://twitter.com/0dayPublishing/status/2015823662457249845 · Twitter Post
• https://t.me/CVEtracker/43004 · Telegram Post
• https://twitter.com/CVEnew/status/2015733306827083777 · Twitter Post
• https://t.me/CVEtracker/42999 · Telegram Post
• https://r.sec-consult.com/dkaccess · Note