CVE-2025-41257: Suprema Biostar 2

Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

Affected products

• Suprema Biostar 2: version 2.9.11.6 only

Published 2026-03-04. Last modified 2026-06-17.