Login Request a demo
BI
Product
BioTime
by ZKTeco · last CVE Oct 12, 2026
On CISA KEVExploited in the wild
18
CVEs
1
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 6Medium 11Low 0
Severity
All severities18Critical1High6Medium11Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add BioTime to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-38950
In wildKEV
7.5
92%
Aug 3
ZKTeco BioTime Path Traversal Vulnerability
Affected: before 9.0.1
CVE-2023-51142
7.5
1%
Mar 21
An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information
Affected: 8.5.4
CVE-2023-38952
7.5
3%
Aug 3
Insecure access control in ZKTeco BioTime through 9.0.1 allows authenticated attackers to escalate their privileges due to the fact that session ids are not validated for the type…
Affected: 8.5.5
CVE-2023-38949
7.5
0%
Aug 3
An issue in a hidden API in ZKTeco BioTime v8.5.5 allows unauthenticated attackers to arbitrarily reset the Administrator password via a crafted web request
Affected: 8.5.5
CVE-2026-108798
7.3
0%
Oct 12
ZKTeco BioTime hard-coded key
Affected: 9.5.6 Build 20260130.3206
CVE-2024-13966
7.3
0%
May 27
ZKTeco BioTime default password
Affected: before 9.0.4
Showing 6