CVE-2025-59096CWE-798

Weak Default Password in dormakaba Kaba exos 9300

Medium · published January 26, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administration") is hard-coded in multiple locations as well as documented in the locally stored user documentation.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00175 · 6.7th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2026-01-26T10:04Z
EPSS history
Timeline
  • 26 JAN 10:04Z
    Weak Default Password in dormakaba Kaba exos 9300
    cvelistv5