Skip to content
OpenAdvisories

Vendor

Suprema

3 known vulnerabilities.

Products

BioStar 2 (server) 2 BioStar 2 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-9508

    Incorrect Permission Assignment for Critical Resource vulnerability in Suprema's BioStar

    Incorrect permission settings on a critical resource in Suprema BioStar 2 (versions 2.9.3 through 2.9.11) that allow backup files to be publicly exposed when the administrator configures their path within the NGINX webroot. This vulnerability allows an attack…

    Suprema BioStar 2 (server)