CVE-2026-108797 | ZKTeco BioTime 9.5.6 Build 20260130.3206 Employee REST API employees authorization

October 11, 2026 Yanac

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206 and classified as problematic. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass.

This vulnerability is listed as CVE-2026-108797. The attack may be initiated remotely. There is no available exploit.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More