CVE-2026-108796
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Oct 12, 2026
Vendor
unknown
Description
A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Executing a manipulation of the argument emp_code can lead to authorization bypass. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way.