Description
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key
. The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It is suggested to upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ZKTeco | BioTime | 9.5.6 Build 20260130.3206 | 9.5.6 Build 3623 |
References
- VDB-416575 | ZKTeco BioTime hard-coded key vdb-entry
- VDB-416575 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- CVE-2026-108798 | CVE Analysis and Report third-party-advisory
- Submit #961812 | ZKTeco BioTime 9.5.6 Build 20260130.3206 Cryptographic Issues third-party-advisory
- https://www.zkteco.com/en/Security_Bulletinsibs/27 patch