Advisories · Technology

Bizerba SE & Co. KG BRAIN2.

Every CVE that names Bizerba SE & Co. KG BRAIN2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112250 CVE record

CVSS 4.4 Medium

Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files
- Bizerba SE & Co. KG BRAIN2
- Information disclosure
Not analysed yet 26 Oct 2026
CVE-2026-16246 CVE record

CVSS 7.3 High

Insecure permission assignment due to execution of LogPathConfig.exe during setup
- Bizerba SE & Co. KG BRAIN2
- Broken access control
Not analysed yet 20 Jul 2026
CVE-2025-6512 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Scripts within reports executable on BRAIN2 Server
- Bizerba SE & Co. KG BRAIN2
- Code injection
Not analysed yet 23 Jun 2025
CVE-2025-6513 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

BRAIN2 Configuration file for database access not sufficiently secured
- Bizerba SE & Co. KG BRAIN2
- CWE-260
Not analysed yet 23 Jun 2025