https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 01:55:05 +0000 https://cve.radiocsirt.org/vuln/cve-2025-59101 <p><strong>Affected:</strong> dormakaba Access Manager 92xx-k5, dormakaba Access Manager 92xx-k7</p> <p>Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information is stored. Therefore, it is possible to spoof the IP address of a logged-in user to gain access to the Access Manager web interface.</p> <p><strong>Affected:</strong> dormakaba Access Manager 92xx-k5, dormakaba Access Manager 92xx-k7</p> <p>Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information is stored. Therefore, it is possible to spoof the IP address of a logged-in user to gain access to the Access Manager web interface.</p> https://cve.radiocsirt.org/vuln/cve-2025-59101