PT-2026-4756 · Webui · Webui

CVE-2025-59106 · Publicado 2026-01-26 · Atualizado 2026-01-31

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description The binary responsible for serving the web server and executing actions initiated from the Web UI operates with root privileges, violating the principle of least privilege. Successful code execution on the system through other means could allow an attacker to directly execute commands with the highest level of privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Enumeração de Fraquezas

CWE-272

Identificadores relacionados

CVE-2025-59106

Produtos afetados

Webui

Referências · 11

• https://dormakabagroup.com/en/security-advisories · Aviso do Fabricante
• https://t.me/CVEtracker/43008 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2025-59106 · Nota de Segurança
• https://twitter.com/cracbot/status/2017553498901254231 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2015744216496779634 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-59106 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2015733298199474565 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2016267771383054554 · Publicação no Twitter
• https://r.sec-consult.com/dormakaba · Nota
• https://twitter.com/cracbot/status/2017191120141480138 · Publicação no Twitter
• https://r.sec-consult.com/dkaccess · Nota