CVE-2025-59106HIGH 8.8EPSS p47.7%

CVE-2025-59106CVE-2025-59106

Description

The binary serving the web server and executing basically all actions launched from the Web UI is running with root privileges. This is against the least privilege principle. If an attacker is able to execute code on the system via other vulnerabilities it is possible to directly execute commands with highest privileges.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS0.68% probability of exploitation · percentile 47.7% · 2026-06-18T12:00:27Z
Published2026-01-26
Last modified2026-02-12

Underlying weaknesses· 1

CWE-272

References

  1. https://r.sec-consult.com/dkaccess
  2. https://r.sec-consult.com/dormakaba
  3. https://www.dormakabagroup.com/en/security-advisories

1

TypeTargetConfidenceTier
WeaknessLeast Privilege Violationcwe-2720%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-59817
CVE
CVE-2025-36535
CVE
CVE-2025-41699
CVE
CVE-2025-25269
CVE
CVE-2025-6541
CVE
CVE-2025-0593
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.