CVE-2026-16247: Bizerba SE & Co. Kg Connect.brain

High severity, CVSS 7.3. EPSS: 0.1% chance of exploitation in the next 30 days.

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of restricting access to %ProgramData%\Bizerba\_connect.BRAIN or %ProgramData%\Bizerba\BCT. Starting with _connect.BRAIN 5.06, the setup no longer executes this tool.

Affected products

• Bizerba SE & Co. Kg Connect.brain: after 5.06

Published 2026-07-20. Last modified 2026-07-21.