ZKTeco vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202414
3. 20253
4. 20266

Newest CVEs

• CVE-2026-108798

  ZKTeco BioTime hard-coded key

  ZKTeco · BioTime

  Medium6.9
• CVE-2026-108797

  ZKTeco BioTime Employee REST API employees authorization

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108796

  ZKTeco BioTime Biometric Data Endpoint finger_data authorization

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108795

  ZKTeco BioTime System Settings API systemSettings access control

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108794

  ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-8598

  Unauthenticated Export Service in ZKTeco CCTV Cameras

  ZKTeco · SSC335-GC2063-Face-0b77 Solution Camera

  Critical9.1
• CVE-2025-15128

  ZKTeco BioTime Endpoint safe_setting credentials storage

  ZKTeco · BioTime

  Medium6.9
• CVE-2024-13966

  ZKTeco BioTime default password

  ZKTeco · BioTime

  Medium6.9
• CVE-2025-45746

  In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the…

  ZKTeco · ZKBio CVSecurity

  Medium6.5
• CVE-2024-11049

  ZKTeco ZKBio Time Image File photo direct request

  ZKTeco · ZKBio Time

  Medium6.3