CVE-2026-108798ZKTeco BioTime hard-coded key

Descripción

A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key . The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It is suggested to upgrade the affected component.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• VDB-416575 | ZKTeco BioTime hard-coded key vdb-entry
• VDB-416575 | CTI Indicators (IOB, IOC, TTP) signaturepermissions-required
• CVE-2026-108798 | CVE Analysis and Report third-party-advisory
• Submit #961812 | ZKTeco BioTime 9.5.6 Build 20260130.3206 Cryptographic Issues third-party-advisory
• https://www.zkteco.com/en/Security_Bulletinsibs/27 patch