Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Suprema Clear all filters
TI-2026-08354 CVE-2026-9509 · GHSA-4ccp-5qcj-7f48

Uncaught exception vulnerability in Suprema's BioStar

Priority MEDIUM 44

An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migra…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00351 Published 2026-05-29 No fix listed CWE-248
TI-2026-08353 CVE-2026-9508 · GHSA-3fmq-xr93-jqc5

Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

Priority MEDIUM 49

Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webro…

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00341 Published 2026-05-29 Fixed in v2.9.12 CWE-732
TI-2025-27503 CVE-2025-41257 · GHSA-jj36-c637-m3x8

Suprema BioStar 2 Insecure Password Change

Priority MEDIUM 55

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00274 Published 2026-03-04 No fix listed CWE-20