ZKTeco BioTime vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 20265

Newest CVEs

• CVE-2026-108798

  ZKTeco BioTime hard-coded key

  ZKTeco · BioTime

  Medium6.9
• CVE-2026-108797

  ZKTeco BioTime Employee REST API employees authorization

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108796

  ZKTeco BioTime Biometric Data Endpoint finger_data authorization

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108795

  ZKTeco BioTime System Settings API systemSettings access control

  ZKTeco · BioTime

  Medium5.3
• CVE-2026-108794

  ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection

  ZKTeco · BioTime

  Medium5.3
• CVE-2025-15128

  ZKTeco BioTime Endpoint safe_setting credentials storage

  ZKTeco · BioTime

  Medium6.9
• CVE-2024-13966

  ZKTeco BioTime default password

  ZKTeco · BioTime

  Medium6.9
• CVE-2024-6523

  ZKTeco BioTime system-group-add cross site scripting

  ZKTeco · BioTime

  Medium5.3