CVE-2026-112250

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

CVE-2026-112250 Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

CVE-2026-112250 Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

EUVD-2026-109706

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

CVE-2026-112250

The BRAIN2 software (versions up to and including 3.09 ) contains a vulnerability where a Windows service account password may be written in cleartext to a setup log file. This occurs during the installation wizard when Microsoft SQL Server access is configured using Integrated Security and a spe...

PT-2026-123239

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using...

Bizerba BRAIN2 log information disclosure vulnerability

Bizerba BRAIN2 versions 3.09 and earlier contain a log information leakage vulnerability. This vulnerability arises because under certain installation conditions, passwords for Windows service accounts may be written in plain text to setup log files, potentially leading to the exposure of...

CVE-2026-16246

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...

CVE-2026-16246 Insecure permission assignment due to execution of LogPathConfig.exe during setup

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...

EUVD-2026-45902

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...

CVE-2026-16246

In BRAIN2, versions prior to 3.09 run LogPathConfig.exe during setup, granting the Everyone group full control over %ProgramData% (not restricted to %ProgramData%\Bizerba\BRAIN2). Starting with 3.09, the setup no longer executes this tool, mitigating the issue for the main installer. However, the...

CVE-2026-16246: Incorrect Default Permissions

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2. Starting with BRAIN2 3.09, the setup no longer executes thi...

Bizerba BRAIN2 Code Generation Data Compromise

The vulnerability of the Bizerba BRAIN2 industrial software platform is related to improper code generation management. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-12508

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...

CVE-2025-12509

On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-12509

On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-12509

CVE-2025-12509 affects Bizerba BRAIN2. A Global_Shipping script can be introduced by an admin on a client and then executed on the BRAIN2 server with administrator rights, potentially giving full administrative control of the server. Root cause: execution of a privileged script across components ...

CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server

On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-12509 Scripts for the module Global_Shipping executable on BRAIN2 Server

On a client with an admin user, a GlobalShipping script can be implemented. The script could later be executed on the BRAIN2 server with administrator rights...

CVE-2025-12508 Unencrypted communication to Active Directory services

When using domain users as BRAIN2 users, communication with Active Directory services is unencrypted. This can lead to the interception of authentication data and compromise confidentiality...