MSSQL CVE-2025-59093

Reliance on Security Through Obscurity (CWE-656)

2026-01-26 551230f0-3615-47bd-b7cc-93e92e730bbf

View

Vulnerability Assessment

Weakness	CWE CWE-656
Impact	Exploitation requires authentication.
Exploit ScenarioDerived	An attacker (requires authentication) could exploit this vulnerability to derive the database password and get authenticated access to the central exos 93.

Monitor Track and reassess. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

No patch listed yet 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

RemediationAI

Monitor vendor advisories for a patch.

Affected ProductsAI

Affects your stack

Find out whether the stacks and servers you run are on an affected version.

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The password is derived from static random values, which are concatenated to the hostname and a random string that can be read by every user from the registry. This allows an attacker to derive the database password and get authenticated access to the central exos 9300 database as the user Exos9300Common. The user has the roles ExosDialog and ExosDialogDotNet assigned, which are able t

Know when MSSQL gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

DescriptionCVE.org

Threat Intelligence Overview

EPSS Score

0.0%

Top 96% exploitable

Data Quality

2 sources

Confidence: Low

CVE.org

EPSS

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.0%

Patch available No

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

More in MSSQL

View all

CVE-2025-15560 HIGH This Week

8.8 Feb 19

An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpo

CVE-2025-61943 HIGH This Week

8.4 Jan 16

The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Standard User) to tamper

CVE-2026-32628 HIGH This Week

7.7 Mar 13

SQL injection in AnythingLLM versions 1.11.1 and earlier enables authenticated users to execute arbitrary SQL commands a

CVE-2025-11177 HIGH This Week

7.5 Oct 15

Unauthenticated SQL injection in the External Login WordPress plugin (versions up to and including 1.11.2) allows remote

CVE-2026-21968 MEDIUM This Month

6.5 Jan 20

Mysql Server contains a vulnerability that allows attackers to unauthorized ability to cause a hang or frequently repeat

CVE-2026-21950 MEDIUM This Month

6.5 Jan 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

CVE-2026-21949 MEDIUM This Month

6.5 Jan 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

CVE-2026-21929 MEDIUM This Month

5.3 Jan 20

Mysql Server contains a vulnerability that allows attackers to unauthorized ability to cause a hang or frequently repeat

CVE-2026-21964 MEDIUM This Month

4.9 Jan 20

Mysql contains a vulnerability that allows attackers to unauthorized ability to cause a hang or frequently repeatable cr

CVE-2026-21952 MEDIUM This Month

4.9 Jan 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affec

CVE-2026-21948 MEDIUM This Month

4.9 Jan 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

CVE-2026-21941 MEDIUM This Month

4.9 Jan 20

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are af

Same weakness CWE-656 – Reliance on Security Through Obscurity

View all

CVE-2026-7161 CRITICAL

9.3

CVE-2026-42363 CRITICAL

9.3

CVE-2020-10284 CRITICAL

9.1

CVE-2020-10286 HIGH

8.8

CVE-2020-10277 MEDIUM

6.4

CVE-2024-5244 MEDIUM

4.2

CVE-2025-7020 MEDIUM

5.1

CVE-2024-12297 CRITICAL

9.2

References

Advisories & patches

REF https://r.sec-consult.com/dkexos REF https://r.sec-consult.com/dormakaba REF https://www.dormakabagroup.com/en/security-advisories

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back