CVE-2025-59108: Weak Default Passwords in dormakaba access manager
Published Jan 26, 2026
·Updated
By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enforced.
Affected Software
1 affected component
dormakaba Access Manager
Remediation
Information
To secure the devices from unauthorized access, it is highly recommended to change the default Password and update to at least Firmware BAME 06.00.x RA.
Event History
Jan 26, 2026
CVE Published
via MITRE·10:06 AM
Data Sourced
via MITRE·10:06 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·10:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-59108?
CVE-2025-59108 is considered a high severity vulnerability due to the risk associated with weak default passwords.
2
How do I fix CVE-2025-59108?
To fix CVE-2025-59108, change the default password 'admin' to a strong, unique password immediately.
3
What systems are affected by CVE-2025-59108?
CVE-2025-59108 affects the dormakaba Access Manager with weak default passwords.
4
Why is CVE-2025-59108 a concern for security?
CVE-2025-59108 is a concern as it allows unauthorized users to access the web interface if the default password is not changed.
5
Is there a patch available for CVE-2025-59108?
Currently, there is no patch available specifically addressing CVE-2025-59108; changing the default password is the recommended action.