Skip to content
OpenAdvisories
Medium · 4.8 CVE-2025-41257 EUVD-2025-208295GHSA-jj36-c637-m3x8

Suprema BioStar 2 Insecure Password Change

Published Mar 4, 2026 · Updated Mar 9, 2026 · Assigned by sba-research

Description

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

Affected products

VendorProductAffectedFixed
Suprema BioStar 2 2.9.11.6 —

References