CVE-2025-59106 — Web Server Running with Root Privileges in dormakaba access manager
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If…
Published: 2026-01-26 · CVSS: 8.8 · CVSS 3.1
The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7