dormakaba publishes security advisories to inform customers about confirmed vulnerabilities in our products, their potential impact, and the steps needed to remediate them.
| Product affected | Advisory ID | Published | CVSS Severity | Vulnerabilities | Document |
|---|---|---|---|---|---|
| exos 9300, MATRIX (MATRIX ONE, MATRIX Professional, MATRIX Cloud), evolo Manager, evolo smart, exivo, resivo, B-COMM, B-COMM HCM/7/ERP, skyra, EntriWorX, Keyscan Aurora and Keyscan LUNA, Ambiance and Community | DKSA-26-23-101 | 21 October 2026 | Critical (9.2) | 2 | Download Vulnerabilities PHP2Shell |
| evolo Service | DKSA-26-31-031 | 31 March 2026 | Critical (9.3) | 1 | Download Vulnerability in dormakaba evolo Service |
| Kaba exos 9300, Dormakaba Access Manager 9200/9230/9290 | DKSA-26-26-012 | 26 January 2026 | Critical (9.3) | 7 | Download Vulnerabilities in Kaba exos 9300 |
| Firmware “exos Client”, Type Access Manager Generation “K5” & “K7” | DKSA-26-26-011 | 26 January 2026 | Critical (9.3) | 12 | Download Vulnerabilities in dormakaba Access Manager |
| Registration unit 90 02, all versions older than FW 0039, serial number older than: 0700039… | DKSA-26-26-013 | 26 January 2026 | Medium (5.1) | 1 | Download Vulnerabilities in dormakaba registration unit 90 02 |