CVE-2026-108798High· 7.3▾ TwilightA vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key . The attack may be launched remotely. Upgrading to versi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
A vulnerability was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This issue affects some unknown processing. The manipulation results in use of hard-coded cryptographic key . The attack may be launched remotely. Upgrading to version 9.5.6 Build 3623 is capable of addressing this issue. It is suggested to upgrade the affected component.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108796Medium· 4.3A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206
CVE-2026-108797Medium· 4.3A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206
CVE-2026-108795Medium· 4.3A vulnerability was detected in ZKTeco BioTime 9.5.6 Build 20260130.3206
CVE-2026-108794Medium· 6.3A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206
CVE-2014-125135High· 7.3OctoPrint Flask Secret Key hard-coded key
CVE-2026-113466Medium· 5.3MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key