PT-2026-61548 · Bizerba Se & Co. Kg · Connect.Brain

CVE-2026-16247 · Publicado 2026-07-20 · Atualizado 2026-07-20

Mitre

CVSS v3.1

7.3

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

In connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of restricting access to %ProgramData%Bizerba connect.BRAIN or %ProgramData%BizerbaBCT.

Starting with connect.BRAIN 5.06, the setup no longer executes this tool.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2026-16247

Produtos afetados

Connect.Brain

Referências · 3

• https://bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0003.pdf · Nota
• https://twitter.com/VulmonFeeds/status/2079273788420563320 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-16247 · Nota de Segurança