BioStar 2 (server) vulnerabilities

2 known vulnerabilities in BioStar 2 (server) from Suprema. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  BioStar 2 (server): Uncaught Exception

  CVE-2026-9509May 29, 2026Suprema

  An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migration’ endpoint. This request triggers a

• 10.0 Critical severity

  BioStar 2 (server): Incorrect Permission Assignment for Critical Resource

  CVE-2026-9508May 29, 2026Suprema

  Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attacke