CVE-2026-16246

HighCVSS 7.3

Published: 20/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

In BRAIN2 prior to version 3.09, the LogPathConfig.exe application is executed during setup, granting the Everyone group full control over %ProgramData% instead of restricting access to %ProgramData%\Bizerba\BRAIN2\. Starting with version 3.09, the setup no longer runs this tool, but the optional Bizerba ScriptService still executes it. ScriptService is deprecated and will not be included from version 3.11.

Risk Assessment

Unauthorized users can gain full access to the %ProgramData% directory, potentially leading to system file modification and privilege escalation.

Recommendation

Update BRAIN2 to version 3.09 or later and avoid using the deprecated Bizerba ScriptService.

Other vulnerabilities in BRAIN2

CVE-2026-112250Medium
In BRAIN2 versions up to and including 3.09, under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using Integrated Security and the Windows account for the BRAIN2 MainService is specified during the installation wizard. The setup log file is stored in the temporary directory of the installing administrator and is generally accessible only to users with administrative privileges.

Original NVD description (English source)

In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2 3.09, the setup no longer executes this tool. However, the optional component Bizerba ScriptService still executes it. Bizerba ScriptService is being deprecated and will no longer be included starting with BRAIN2 version 3.11.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS