CVE Intelligence

Supremainc vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Supremainc products: 1 record(s), with severity, exploitation and fixes.

BioStar 2 1

Exploited only (KEV) →

CVE-2026-31278 High · 7.7 CWE-319 Sep 13, 2026
Cleartext Transmission of Sensitive Information in Supremainc BioStar 2
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request.