TI-2026-80307 CVE-2026-112250 · GHSA-p6ch-jxpp-q2jv
Cleartext service account password in BRAIN2 setup log files
Priority LOW 20
A vulnerability has been identified in BRAIN2 versions up to and including version 3.09.
Vulnerabilities
7 records
TI-2026-13585 CVE-2026-16247 · GHSA-gxr5-ww5q-wmqx
Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN
Priority LOW 33
In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup.
TI-2026-13584 CVE-2026-16246 · GHSA-r977-vhwm-4c47
Insecure permission assignment due to execution of LogPathConfig.exe during setup
Priority LOW 31
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup.
TI-2025-05912 CVE-2025-6512 · GHSA-hfr2-mw2v-5fh3
Scripts within reports executable on BRAIN2 Server
Priority MEDIUM 50
On a client with a non-admin user, a script can be integrated into a report.
TI-2025-05913 CVE-2025-6513 · GHSA-7f9h-3v62-fx27
BRAIN2 Configuration file for database access not sufficiently secured
Priority MEDIUM 41
Standard Windows users can access the configuration file for database access of the BRAIN2 application and decrypt it.
TI-2025-02464 CVE-2025-2820 · GHSA-495w-c474-hvvj
Denial of service in Bizerba SE & Co. KG Product family GLx and CWx
Priority LOW 30
An authenticated attacker can compromise the availability of the device via the network
TI-2025-02463 CVE-2025-2819 · GHSA-j6w5-x2v9-vjvh
Unrestricted Fileupload
Priority LOW 29
There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process.