CVE-2026-16247 Bizerba SE & Co. KG CVE debrief

Who should care

Users of _connect.BRAIN versions prior to 5.06 should review and apply the vendor's remediation. This includes reviewing permissions on %ProgramData%, verifying the version of _connect.BRAIN, and applying the necessary patches or updates. Additionally, security teams should monitor for potential exploitation attempts and review compensating controls for exposed systems.

Technical summary

In _connect.BRAIN versions prior to 5.06, the application LogPathConfig.exe is executed during setup, deleting and replacing existing permissions on %ProgramData%, granting the Windows group Everyone full control instead of restricting access to %ProgramData%/_connect.BRAIN or %ProgramData%/Bizerba/BCT. Starting with _connect.BRAIN 5.06, the setup no longer executes this tool. This change improves security by restricting access to sensitive directories.

Defensive priority

High priority due to high CVSS score of 7.3 and potential impact on sensitive directories.

Recommended defensive actions

• Review and apply the vendor's remediation
• Inventory checks for _connect.BRAIN versions prior to 5.06
• Verify permissions on %ProgramData%
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems
• Perform asset inventory of affected systems
• Track exceptions and retest remediated assets

Evidence notes

Evidence is limited; further verification is required. The CVE record was published on 2026-07-20T12:17:56.230Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. Additional verification tasks are needed to confirm affected scope and severity.

Official resources