CVE-2025-41257Disclosure

LOWCVSS 4.8 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities can lead to unauthorized account access and potential system compromise.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-03-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-04: 2Mentions · 2026-03-05: 1Technical Details · 2026-03-04: 2Technical Details · 2026-03-05: 103-0403-05
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-042
Disclosure2
2026-03-051
Disclosure1
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-41257 Suprema BioStar 2 Authentication Bypass Vulnerability in Version 2.9.11.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-41257

    Post summary

    The text announces CVE-2025-41257, an authentication bypass vulnerability affecting Suprema BioStar 2 2.9.11.6, linking to a vulnerability details page.

    1000043
    4.0K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-41257 Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities c… https://www.cve.org/CVERecord?id=CVE-2025-41257 ----- Traducción: CVE-2025-41257 Sup… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2025‑41257, noting that BioStar 2 permits password changes without authentication and links to the CVE record.

    0000091
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-41257 Suprema’s BioStar 2 in version 2.9.11.6 allows users to set new password without providing the current one. Exploiting this flaw combined with other vulnerabilities c… https://www.cve.org/CVERecord?id=CVE-2025-41257

    Post summary

    CVE-2025-41257 in Suprema BioStar 2 allows password reset without authentication, exposing potential unauthorized access.

    00000249
    56.6K followersView on X

Explore more