BRAIN2 vulnerabilities

2 known vulnerabilities in BRAIN2 from Bizerba SE & Co. KG. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  BRAIN2: Incorrect Default Permissions

  CVE-2026-16246Jul 20, 2026Bizerba SE & Co. KG

  In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2

• 10.0 Critical severity

  BRAIN2: Improper Control of Generation of Code

  CVE-2025-6512Jun 23, 2025Bizerba SE & Co. KG

  On a client with a non-admin user, a script can be integrated into a report. The reports could later be executed on the BRAIN2 server with administrator rights.