CVE-2026-16246
Received Received - Intake

Excessive File Permissions in Bizerba BRAIN2

Publication date: 2026-07-20

Last updated on: 2026-07-20

Assigner: bizerba

Description
In BRAIN2 versions prior to 3.09, the application LogPathConfig.exe is executed during setup. As a result, the Windows group Everyone is granted full control over %ProgramData% instead of being restricted to %ProgramData%\Bizerba\BRAIN2\. Starting with BRAIN2 3.09, the setup no longer executes this tool. However, the optional component Bizerba ScriptService still executes it. Bizerba ScriptService is being deprecated and will no longer be included starting with BRAIN2 version 3.11.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-20
Last Modified
2026-07-20
Generated
2026-07-21
AI Q&A
2026-07-20
EPSS Evaluated
N/A
NVD
CVE-2026-16246
EUVD
EUVD-2026-45902

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
bizerba brain2 to 3.09 (exc)
bizerba bizerscriptservice From 3.11 (inc)
bizerba bizerscriptservice to 3.11 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves improper permissions in BRAIN2 software versions before 3.09. During setup, the application LogPathConfig.exe grants the Windows group Everyone full control over the %ProgramData% directory instead of restricting access to %ProgramData%\Bizerba\BRAIN2\. This allows unauthorized users to modify system files.

Detection Guidance

Check for excessive permissions on %ProgramData% by running icacls "%ProgramData%" in Command Prompt. Look for the Everyone group with full control (F) permissions. Also verify if LogPathConfig.exe exists in %ProgramData%\Bizerba\BRAIN2\ or related directories.

Impact Analysis

An attacker could exploit this to gain elevated privileges, modify critical system files, or install malicious software. Systems running BRAIN2 versions prior to 3.09 are affected. The optional Bizerba ScriptService component also remains vulnerable until version 3.11.

Compliance Impact

This vulnerability may violate compliance requirements by allowing unauthorized access to sensitive system directories. It could lead to data breaches or unauthorized modifications, potentially violating GDPR (data protection) or HIPAA (health data security) if exploited.

Mitigation Strategies

Remove full control permissions for the Everyone group on %ProgramData% using icacls "%ProgramData%" /remove Everyone /T. Ensure BRAIN2 is updated to version 3.09 or later. If using Bizerba ScriptService, consider disabling it until upgrading to version 3.11.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-16246. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart