Suprema vulnerabilities
We track 2 vulnerabilities in Suprema products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Suprema vulnerabilities
- 8.7 High severity
BioStar 2 (server): Uncaught Exception
An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migration’ endpoint. This request triggers a
- 10.0 Critical severity
BioStar 2 (server): Incorrect Permission Assignment for Critical Resource
Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacke