What’s Vulnerable › Products

ZKTeco BioTime vulnerabilities

18 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ZKTeco BioTime version is affected

Exploited ZKTeco BioTime vulnerabilities

• CVE-2023-38950 — ZKTeco BioTime Path Traversal Vulnerability

Latest ZKTeco BioTime vulnerabilities

• CVE-2026-108798 — ZKTeco BioTime hard-coded key (CVSS 7.3)
• CVE-2026-108797 — ZKTeco BioTime Employee REST API employees authorization (CVSS 4.3)
• CVE-2026-108796 — ZKTeco BioTime Biometric Data Endpoint finger_data authorization (CVSS 4.3)
• CVE-2026-108795 — ZKTeco BioTime System Settings API systemSettings access control (CVSS 4.3)
• CVE-2026-108794 — ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection (CVSS 6.3)
• CVE-2025-15128 — ZKTeco BioTime Endpoint safe_setting credentials storage (CVSS 5.3)
• CVE-2024-13966 — ZKTeco BioTime default password (CVSS 7.3)
• CVE-2024-6523 — ZKTeco BioTime system-group-add cross site scripting (CVSS 5.4)
• CVE-2023-51142 — (CVSS 7.5)
• CVE-2023-51141 — (CVSS 6.5)
• CVE-2023-38952 — (CVSS 7.5)
• CVE-2023-38951 — (CVSS 9.8)
• CVE-2023-38950 — ZKTeco BioTime Path Traversal Vulnerability (CVSS 7.5) — exploited
• CVE-2023-38949 — (CVSS 7.5)
• CVE-2022-38803 — (CVSS 6.8)
• CVE-2022-38802 — (CVSS 6.2)
• CVE-2022-38801 — (CVSS 5.4)
• CVE-2022-30515 — (CVSS 5.3)