CVE-2026-16246

{"id": "CVE-2026-16246", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-16246", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-20T13:02:39.900691Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 4.7, "exploitabilityScore": 2.5}]}, "affected": [{"source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "affectedData": [{"vendor": "Bizerba SE & Co. KG", "product": "BRAIN2", "versions": [{"status": "affected", "version": ">3.09"}], "platforms": ["Windows"], "defaultStatus": "affected"}]}], "published": "2026-07-20T12:17:56.087", "references": [{"url": "https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0003.pdf", "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "0beee27a-7d8c-424f-8e46-ac453fa147e6", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "In BRAIN2 versions prior to 3.09, the\napplication LogPathConfig.exe is executed during setup. As a result, the\nWindows group Everyone is granted full control over %ProgramData% instead of\nbeing restricted to %ProgramData%\\Bizerba\\BRAIN2\\.\n\n\n\n\n\nStarting with BRAIN2 3.09, the setup no\nlonger executes this tool.\n\nHowever, the optional component Bizerba ScriptService still executes it.\n\n\n\n\n\nBizerba ScriptService is being\ndeprecated and will no longer be included starting with BRAIN2 version 3.11."}], "lastModified": "2026-07-21T20:25:45.920", "sourceIdentifier": "0beee27a-7d8c-424f-8e46-ac453fa147e6"}