Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-16247

Insecure permission overwrite due to execution of LogPathConfig.exe while installing _connect.BRAIN

Description

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup. During this process, existing permissions on %ProgramData% are deleted and replaced, granting the Windows group Everyone full control instead of restricting access to %ProgramData%\Bizerba\_connect.BRAIN or %ProgramData%\Bizerba\BCT. Starting with _connect.BRAIN 5.06, the setup no longer executes this tool.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bizerba SE & Co. KG _connect.BRAIN

Default version status: affected

  • >5.06affected

References