CVE-2025-59094CWE-269

Local Privilege Escalation in dormakaba Kaba exos 9300 System management

High · published January 26, 2026

CVSS v4.0
8.4
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management application (d9sysdef.exe). Within this application it is possible to specify an arbitrary executable as well as the weekday and start time, when the specified executable should be run with SYSTEM privileges.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00166 · 5.5th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2026-01-26T10:04Z
EPSS history
Timeline
  • 26 JAN 10:04Z
    Local Privilege Escalation in dormakaba Kaba exos 9300 System management
    cvelistv5