ZKTeco vulnerabilities
24 published CVEs name ZKTeco among the affected products.
- 24Published CVEs24 of them scored
- 7Last 12 monthspublished in the last year
- 4Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-108798
ZKTeco BioTime hard-coded key
ZKTeco · BioTime
Medium6.9 - CVE-2026-108797
ZKTeco BioTime Employee REST API employees authorization
ZKTeco · BioTime
Medium5.3 - CVE-2026-108796
ZKTeco BioTime Biometric Data Endpoint finger_data authorization
ZKTeco · BioTime
Medium5.3 - CVE-2026-108795
ZKTeco BioTime System Settings API systemSettings access control
ZKTeco · BioTime
Medium5.3 - CVE-2026-108794
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
ZKTeco · BioTime
Medium5.3 - CVE-2026-8598
Unauthenticated Export Service in ZKTeco CCTV Cameras
ZKTeco · SSC335-GC2063-Face-0b77 Solution Camera
Critical9.1 - CVE-2025-15128
ZKTeco BioTime Endpoint safe_setting credentials storage
ZKTeco · BioTime
Medium6.9 - CVE-2024-13966
ZKTeco BioTime default password
ZKTeco · BioTime
Medium6.9 - CVE-2025-45746
In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the…
ZKTeco · ZKBio CVSecurity
Medium6.5 - CVE-2024-11049
ZKTeco ZKBio Time Image File photo direct request
ZKTeco · ZKBio Time
Medium6.3