CVE Intelligence

Supremainc BioStar 2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Supremainc BioStar 2: 1 record(s), with affected versions and fixes.

CVE-2026-31278 High · 7.7 CWE-319 Sep 13, 2026
Cleartext Transmission of Sensitive Information in Supremainc BioStar 2
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request.