Z
Vendor security profile1 actively exploited CVEs
zkteco
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs17
Critical2
CISA KEV1
Public exploit6
Patch rate%0
Avg. CVSS7.2
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
0
0
5
CVE KEV
CVE severity distribution
17toplam CVE
Critical2 (12%)
High8 (47%)
Medium7 (41%)
Patch and exploitation view
%0
Verified patch
%6
CISA KEV
%35
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
17Unknown
Latest vulnerabilities
6.9
CVE-2026-108798
ZKTeco BioTime hard-coded key
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108797
ZKTeco BioTime Employee REST API employees authorization
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108796
ZKTeco BioTime Biometric Data Endpoint finger_data authorization
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108795
ZKTeco BioTime System Settings API systemSettings access control
Z
Patch status unknownEPSS %0
5.3
CVE-2026-108794
ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection
Z
Patch status unknownEPSS %0
7.5
CVE-2023-51142
Information exposure in Zkteco Biotime
Z
Patch status unknownEPSS %1
6.5
CVE-2023-51141
Vulnerability in Zkteco Biotime
Z
Patch status unknownEPSS %1
7.5
CVE-2023-38952
Vulnerability in Zkteco Biotime
Z
Patch status unknownEPSS %3
9.8
CVE-2023-38951
Path traversal in Zkteco Biotime
Z
Patch status unknownEPSS %3
7.5
CVE-2023-38950 Actively exploited
Path traversal in Zkteco Biotime
Z
Patch status unknownEPSS %92