CVE-2025-59101

HighCVSS 7.7/10Last modified Jun 17, 2026

Description

Instead of typical session tokens or cookies, it is verified on a per-request basis if the originating IP address has once successfully logged in. As soon as an authentication request from a certain source IP is successful, the IP address is handled as authenticated. No other session information is stored. Therefore, it is possible to spoof the IP address of a logged-in user to gain access to the Access Manager web interface.

Metrics

CVSS 4.0 7.7/10

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-291

Affected software

No affected versions have been published.

Timeline

Published: Jan 26, 2026
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-591026.9The web server of the Access Manager offers a functionality to download a backup of the local database stored on the device. This database c CVE-2025-591039.2The Access Manager 92xx in hardware revision K7 is based on Linux instead of Windows CE embedded in older hardware revisions. In this new ha CVE-2025-591047.0With physical access to the device and enough time an attacker is able to solder test leads to the debug footprint (or use the 6-Pin tag-con CVE-2025-591057.0With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of mis CVE-2025-591068.8The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is agai CVE-2025-591078.5Dormakaba provides the software FWServiceTool to update the firmware version of the Access Managers via the network. The firmware in some in CVE-2025-591089.2By default, the password for the Access Manager's web interface, is set to 'admin'. In the tested version changing the password was not enfo CVE-2025-591095.1The dormakaba registration units 9002 (PIN Pad Units) have an exposed UART header on the backside. The PIN pad is sending every button press CVE-2025-59118.8A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknow CVE-2025-591106.5Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Implemented CSRF protection mechanism can be bypassed b CVE-2025-591116.5Windu CMS is vulnerable to Broken Access Control in user editing functionality. Malicious attacker can send a GET request which allows privi CVE-2025-591126.5Windu CMS is vulnerable to Cross-Site Request Forgery in user editing functionality. Malicious attacker can craft special website, which whe