Read the docs

Suprema

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Suprema records in CISA KEV

No Suprema vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-27503 CVE-2025-41257 · GHSA-jj36-c637-m3x8

Suprema BioStar 2 Insecure Password Change

Priority MEDIUM 55

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00274 Published 2026-03-04 No fix listed CWE-20
TI-2026-08353 CVE-2026-9508 · GHSA-3fmq-xr93-jqc5

Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

Priority MEDIUM 49

Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webro…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00341 Published 2026-05-29 Fixed in v2.9.12 CWE-732
TI-2026-08354 CVE-2026-9509 · GHSA-4ccp-5qcj-7f48

Uncaught exception vulnerability in Suprema's BioStar

Priority MEDIUM 44

An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migra…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00351 Published 2026-05-29 No fix listed CWE-248
Open these records in search →