Reported by 3 outlets
Suprema BioStar 2 door-access software leaks its Active Directory service-account password in cleartext (CVE-2026-31278). Any operator login
Why this score
- Breadth
- 1.50 / 2.0 · 3 sources
- Authority
- 1.00 / 2.0 · best outlet weight
- Severity
- 1.00 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.58 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Suprema BioStar 2 door-access software leaks its Active Directory service-account password in cleartext (CVE-2026-31278). Any operator login
suriq.io · 30d ago · September 14th, 2026
Suprema BioStar 2 door-access software leaks its Active Directory service-account password in cleartext (CVE-2026-31278). Any operator login
via Mastodon https://suriq.io/blog/biostar2-cve-2026-31278-ad-credential-cleartext
-
update from www.thehackerwire.com
🟠 CVE-2026-31278 - High (7.7) An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X
www.thehackerwire.com · 30d ago · September 14th, 2026
🟠 CVE-2026-31278 - High (7.7) An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X
via Mastodon https://www.thehackerwire.com/vulnerability/CVE-2026-31278/
-
update from www.yazoul.net
🟠 New security advisory: CVE-2026-31278 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized acces
www.yazoul.net · 29d ago · September 14th, 2026
🟠 New security advisory: CVE-2026-31278 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized acces
via Mastodon https://www.yazoul.net/advisory/cve/cve-2026-31278-biostar-2-leaks-ad-service-credentials-poc
-
mentioned by www.yazoul.net
🟠 New security advisory: CVE-2026-31278 affects multiple systems. • Impact: Significant security breach potential • Risk: Unauthorized acces
www.yazoul.net · 29d ago · September 14th, 2026