Dormakaba flaws allow to access major organizations’ doors

**Executive summary:** Researchers from SEC Consult disclosed more than 20 critical vulnerabilities in Dormakaba's exos 9300 physical access control systems used by large organizations (including energy firms, logistics companies, and airports), which could enable remote unlocking of doors, unauthorized reconfiguration of controllers, and credential theft; some access managers were found exposed on the internet, a PoC video was published, and the vendor has released patches and mitigations with no confirmed in-the-wild exploitation reported.