CVE-2025-12507

The service Bizerba Communication Server (BCS) has an unquoted service path. Due to the way Windows searches the executable for the BCS service, malicious programs can be executed.

CVSS 3.1

8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-25)

CWE

CWE-428

Published

2025-10-31

Modified

2026-10-07

Record from

the NVD, synced 2026-10-19

References

• https://www.bizerba.com/downloads/global/information-security/2025/bizerba-sa-2025-0005.pdf

Check your stackJSON