CVE-2025-59094

N/A

Description

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM privileges.

CVE Details

CVSS v3.1 ScoreN/A

Published1/26/2026

Last Modified1/26/2026

Sourcenvd

Honeypot Sightings0

Weaknesses (CWE)

CWE-269

References

https://r.sec-consult.com/dkexos(551230f0-3615-47bd-b7cc-93e92e730bbf)

https://r.sec-consult.com/dormakaba(551230f0-3615-47bd-b7cc-93e92e730bbf)

https://www.dormakabagroup.com/en/security-advisories(551230f0-3615-47bd-b7cc-93e92e730bbf)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.