Eppendorf BioFlo 320 Flaw Allows VNC Hack CVE-2026-7251

CyberSIXT Evidence Panel

Primary Source

eppendorf.com

CVE Intel

CVE-2026-7251 - NVD Not in KEV 9.8 CRITICAL Patch Unknown

CISA KEV Not in KEV

Patch Patch Status Unknown

A critical security vulnerability (CVE-2026-7251) has been identified in Eppendorf's BioFlo 320 bioreactor, with a CVSS severity rating of 9.8. This flaw arises from a hard-coded password in its remote management tool using VNC architecture, allowing unauthorized access and manipulation of sensitive biochemical processes. Manufacturers have issued a software patch to disable the vulnerable protocol. Users are urged to apply the latest Version 5.0 software package and ensure configuration changes are restricted to trusted personnel.

Article by CyberSIXT