Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-112250 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A vulnerability has been identified in BRAIN2 versions up to and including version 3.09. Under specific installation conditions, the password of a Windows service account may be written in cleartext to a setup log file. The issue occurs when Microsoft SQL Server access is configured using Integrated Security and the Windows account intended to run the BRAIN2 MainService is specified during execution of the BRAIN2 installation wizard. The setup log file is stored in the temporary directory of the Windows administrator performing the installation. This directory is not accessible to standard Windows users and can generally only be accessed by users with administrative privileges. Successful exploitation could result in the disclosure of credentials belonging to the configured BRAIN2 service account.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:4.4 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CNA: bizerbaCVSS-B:4.4 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.bizerba.com/downloads/global/information-security/2026/bizerba-sa-2026-0004.pdf bizerbaAdvisoryRemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-532Insertion of Sensitive Information into Log Filebizerba

Affected Products

ProductVersions
Bizerba BRAIN2
<= 3.09

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • Upgrade: 3.10moderate effort
  • Workaround:low effort

    Delete BRAIN2 installation log files after successful installation.

  • Mitigation:low effort

    Restrict administrative access to affected systems.

  • Mitigation:low effort

    Ensure temporary directories containing installation artifacts are adequately protected.

  • Mitigation:low effort

    Change the password of the configured service account if credential exposure is suspected.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-112250
NVD Published Date:
Oct 26, 2026
NVD Last Modified:
Oct 26, 2026
Source:
bizerba
CVE-2026-112250 Details - Not Deferred