CVE-2025-41257

—

CVSS 3.1

4.8 medium

EPSS

<1%p16

Published

Mar 4, 2026 (Mar 4, 2026)

Modified

Jun 17, 2026

Description

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.