CVE-2026-9509General

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migration’ endpoint. This request triggers a failure that halts critical processes, leaving the system offline until the services or server are manually restarted. As a result, access control readers cease to function, and potential failures may occur in third-party integrations. Since the exploit requires no privileges or user interaction and is trivial to automate, the impact on availability is high, and the effect extends to interconnected systems.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-supremas-biostar

Weakness type (CWE)

CWE-248

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 1 signal
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 1d ago at 2 mentions (2026-05-29); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-29	2	Disclosure1General1
2026-06-17	1	General1

Full discourse3 posts

INCIBE-CERT@incibe_cert137d
Disclosure
⚠️#INCIBEaviso | Múltiples vulnerabilidades en BioStar de #Suprema #CVE CVE-2026-9508 y CVE-2026-9509 https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-biostar-de-suprema #AvisosDeSeguridad #TI #CNA
Post summary
Incibe has announced two new CVEs (9508 and 9509) affecting Suprema’s BioStar product; the short bulletin does not provide details about PoCs, exploitation tools, active attacks, patches, or technical specifics.
01010489
42.8K followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker118d
General
CVE-2026-9509 Suprema BioStar 2の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/13/cve-2026-9509-suprema-biostar-2/ #IT #Security #cybersecurity
Post summary
The text announces that a blog post covers CVE‑2026‑9509, summarizing its impact and mitigation, but provides no technical, exploit, or patch details.
0001035
209 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
General
CVE-2026-9509 Unauthenticated Denial of Service in Suprema BioStar 2 Server Versions 2.9.8-2.9.11 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-9509
Post summary
The post confirms a denial‑of‑service vulnerability (CVE‑2026‑9509) affecting specific versions of Suprema BioStar 2 Server, but offers no PoC, exploit, active‑exploitation, or patch details.
0000058
4.0K followersView on X

Explore more

Back to dashboard