CVE-2026-108796 | ZKTeco BioTime 9.5.6 Build 20260130.3206 Biometric Data Endpoint /iclock/finger_data/ emp_code authorization

October 11, 2026 Yanac

A vulnerability, which was classified as problematic, was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Executing a manipulation of the argument emp_code can lead to authorization bypass.

This vulnerability is tracked as CVE-2026-108796. The attack can be launched remotely. No exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More