CVE Feed

    Dashboard / CVE / CVE-2025-59090

    CVE-2025-59090

    On the exos 9300 server, a SOAP API is reachable on port 8002. This API does not require any authentication prior to sending requests. Therefore, network access to the exos server allows e.g. the creation of arbitrary access log events as well as querying the 2FA PINs associated with the enrolled chip cards.

    Published:Jan 26, 2026
    Last Modified:Apr 15, 2026
    EPS:Jan 26, 2026
    EPSS Score:0.00122
    CVSS Score:9.3

    Affected Products

    Vendor
    Dormakaba
    Product
    Kaba Exos 9300

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-59096 (CVSS 4.6) — The default password for the extended admin user mode in the application U9ExosAdmin.exe ("Kaba 9300 Administr…
    CVE-2025-59095 (CVSS 6.8) — The program libraries (DLL) and binaries used by exos 9300 contain multiple hard-coded secrets. One notable ex…
    CVE-2025-59094 (CVSS 8.4) — A local privilege escalation vulnerability has been identified in the Kaba exos 9300 System management applica…
    CVE-2025-59093 (CVSS 8.5) — Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server…
    CVE-2025-59092 (CVSS 8.7) — An RPC service, which is part of exos 9300, is reachable on port 4000, run by the process FSMobilePhoneInterfa…
    CVE-2025-59091 (CVSS 9.3) — Multiple hardcoded credentials have been identified, which are allowed to sign-in to the exos 9300 datapoint s…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High