CVE-2025-12507: Bizerba Connect.brain

High severity, CVSS 8.8. EPSS: 0.1% chance of exploitation in the next 30 days.

The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.

Affected products

  • Bizerba Connect.brain: from 0.0, before 5.02 (fixed in 5.02)

Published 2025-10-31. Last modified 2026-10-07.