CVE-2026-9509
Uncaught exception vulnerability in Suprema's BioStar
An unhandled exception in Suprema BioStar 2 (Server), versions 2.9.8, 2.9.10, and 2.9.11, that allows an unauthenticated remote attacker to cause a denial of service (DoS) by sending HTTP POST requests to the ‘/api/migration’ endpoint. This request triggers a failure that halts critical processes, leaving the system offline until the services or server are manually restarted. As a result, access control readers cease to function, and potential failures may occur in third-party integrations. Since the exploit requires no privileges or user interaction and is trivial to automate, the impact on availability is high, and the effect extends to interconnected systems.
| CWE | CWE-248 |
| Vendor | suprema |
| Product | biostar 2 (server) |
| Published | May 29, 2026 |
| Last Updated | May 29, 2026 |
Get instant alerts for suprema biostar 2 (server)
Be the first to know when new unknown vulnerabilities affecting suprema biostar 2 (server) are published — delivered to Slack, Telegram or Discord.