CVE-2026-112250

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-112250", "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "state": "PUBLISHED", "assignerShortName": "bizerba", "dateReserved": "2026-10-19T12:52:16.085Z", "datePublished": "2026-10-26T09:41:29.352Z", "dateUpdated": "2026-10-26T14:35:18.697Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "shortName": "bizerba", "dateUpdated": "2026-10-26T09:41:29.352Z"}, "title": "Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file", "type": "CWE"}]}], "affected": [{"vendor": "Bizerba SE & Co. KG", "product": "BRAIN2", "platforms": ["Windows", "x86", "64 bit"], "versions": [{"status": "affected", "version": "0.0", "lessThan": "3.10", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.\u00a0The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.\u00a0The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.\u00a0Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.&nbsp;<span>The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.&nbsp;</span><span>The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.&nbsp;</span><span>Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account.</span></p>"}]}], "references": [{"url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"}}], "workarounds": [{"lang": "en", "value": "Until an upgrade can be applied, Bizerba\nrecommends implementing the following measures:\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nDelete BRAIN2 installation log\nfiles after successful installation.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nRestrict administrative access\nto affected systems.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nChange the password of the\nconfigured service account if credential exposure is suspected.\n\n\n\n\n\nAdministrators should review and remove\nsetup log files following the naming convention:\n\n\n\n\n \n \n \n\nBizerba\n BRAIN2_<Version>_<InstallationDate>_<InstallationTime>_setup.log", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>Until an upgrade can be applied, Bizerba\nrecommends implementing the following measures:</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nDelete BRAIN2 installation log\nfiles after successful installation.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nRestrict administrative access\nto affected systems.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nChange the password of the\nconfigured service account if credential exposure is suspected.</p>\n\n<p>Administrators should review and remove\nsetup log files following the naming convention:</p>\n\n<table>\n <tbody><tr>\n <td>\n <p>Bizerba\n BRAIN2_&lt;Version&gt;_&lt;InstallationDate&gt;_&lt;InstallationTime&gt;_setup.log</p>\n </td>\n </tr>\n</tbody></table>"}]}], "solutions": [{"lang": "en", "value": "This vulnerability has been fixed in BRAIN2\nversion 3.10.\n\n\n\n\n\nCustomers are strongly advised to upgrade\nto BRAIN2 version 3.10 or later.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>This vulnerability has been fixed in <b>BRAIN2\nversion 3.10</b>.</p>\n\n<p>Customers are strongly advised to upgrade\nto <b>BRAIN2 version 3.10 or later</b>.</p>"}]}], "timeline": [{"time": "2026-09-25T07:51:00.000Z", "lang": "en", "value": "Vulnerability identified"}, {"time": "2026-10-02T07:51:00.000Z", "lang": "en", "value": "Fix Available in Brain2 3.10"}], "source": {"advisory": "BIZERBA-SA-2026-0004", "discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-112250", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-26T13:24:21.499585Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T14:35:18.697Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-112250", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-26T13:24:21.499585Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-26T14:30:42.620Z"}}], "cna": {"title": "Cleartext Storage of Windows Service Account Password in BRAIN2 Setup Log Files", "source": {"advisory": "BIZERBA-SA-2026-0004", "discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Bizerba SE & Co. KG", "product": "BRAIN2", "versions": [{"status": "affected", "version": "0.0", "lessThan": "3.10", "versionType": "semver"}], "platforms": ["Windows", "x86", "64 bit"], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2026-09-25T07:51:00.000Z", "value": "Vulnerability identified"}, {"lang": "en", "time": "2026-10-02T07:51:00.000Z", "value": "Fix Available in Brain2 3.10"}], "solutions": [{"lang": "en", "value": "This vulnerability has been fixed in BRAIN2\nversion 3.10.\n\n\n\n\n\nCustomers are strongly advised to upgrade\nto BRAIN2 version 3.10 or later.", "supportingMedia": [{"type": "text/html", "value": "<p>This vulnerability has been fixed in <b>BRAIN2\nversion 3.10</b>.</p>\n\n<p>Customers are strongly advised to upgrade\nto <b>BRAIN2 version 3.10 or later</b>.</p>", "base64": false}]}], "references": [{"url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf"}], "workarounds": [{"lang": "en", "value": "Until an upgrade can be applied, Bizerba\nrecommends implementing the following measures:\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nDelete BRAIN2 installation log\nfiles after successful installation.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nRestrict administrative access\nto affected systems.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.\n\n\n\n\n\n\u00b7\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\nChange the password of the\nconfigured service account if credential exposure is suspected.\n\n\n\n\n\nAdministrators should review and remove\nsetup log files following the naming convention:\n\n\n\n\n \n \n \n\nBizerba\n BRAIN2_<Version>_<InstallationDate>_<InstallationTime>_setup.log", "supportingMedia": [{"type": "text/html", "value": "<p>Until an upgrade can be applied, Bizerba\nrecommends implementing the following measures:</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nDelete BRAIN2 installation log\nfiles after successful installation.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nRestrict administrative access\nto affected systems.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nEnsure temporary directories\ncontaining installation artifacts are adequately protected.</p>\n\n<p>\u00b7&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;\nChange the password of the\nconfigured service account if credential exposure is suspected.</p>\n\n<p>Administrators should review and remove\nsetup log files following the naming convention:</p>\n\n<table>\n <tbody><tr>\n <td>\n <p>Bizerba\n BRAIN2_&lt;Version&gt;_&lt;InstallationDate&gt;_&lt;InstallationTime&gt;_setup.log</p>\n </td>\n </tr>\n</tbody></table>", "base64": false}]}], "x_generator": {"engine": "Vulnogram 1.0.5"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.\u00a0The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.\u00a0The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.\u00a0Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account.", "supportingMedia": [{"type": "text/html", "value": "<p>A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.&nbsp;<span>The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.&nbsp;</span><span>The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.&nbsp;</span><span>Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account.</span></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file"}]}], "providerMetadata": {"orgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "shortName": "bizerba", "dateUpdated": "2026-10-26T09:41:29.352Z"}}}, "cveMetadata": {"cveId": "CVE-2026-112250", "state": "PUBLISHED", "dateUpdated": "2026-10-26T14:35:18.697Z", "dateReserved": "2026-10-19T12:52:16.085Z", "assignerOrgId": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "datePublished": "2026-10-26T09:41:29.352Z", "assignerShortName": "bizerba"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows", "x86", "64 bit"], "product": "BRAIN2", "vendor": "Bizerba SE & Co. KG", "versions": [{"lessThan": "3.10", "status": "affected", "version": "0.0", "versionType": "semver"}]}], "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in\nBRAIN2 versions up to and including version 3.09. Under specific installation\nconditions, the password of a Windows service account may be written in\ncleartext to a setup log file.\u00a0The issue occurs when Microsoft SQL Server\naccess is configured using Integrated Security and the Windows account intended\nto run the BRAIN2 MainService is specified during execution of the BRAIN2\ninstallation wizard.\u00a0The setup log file is stored in the\ntemporary directory of the Windows administrator performing the installation.\nThis directory is not accessible to standard Windows users and can generally\nonly be accessed by users with administrative privileges.\u00a0Successful exploitation could result in the\ndisclosure of credentials belonging to the configured BRAIN2 service account."}], "id": "CVE-2026-112250", "lastModified": "2026-10-26T17:11:35.487", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-112250", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-26T13:24:21.499585Z", "version": "2.0.3"}}]}, "published": "2026-10-26T10:16:51.337", "references": [{"source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf"}], "sourceIdentifier": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-532"}], "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows", "x86", "64_bit"], "status": "affected", "versions": {"scheme": "generic", "value": "[0.0,3.10)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "manual", "scores": [{"score": 100.0, "source": "manual"}]}, "original": {"product": "BRAIN2", "source": "cna", "vendor": "Bizerba SE & Co. KG"}, "product": "brain2", "vendor": "bizerba"}], "created": "2026-10-26T11:30:14.022020+00:00", "updated": "2026-10-26T18:51:04.988009+00:00", "vendors": ["bizerba", "bizerba$PRODUCT$brain2"]}