CVE-2026-108794 | ZKTeco BioTime 9.5.6 Build 20260130.3206 Database Migration Functionality db_migrate_setting sql injection

October 11, 2026 Yanac

A vulnerability classified as critical was found in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection.

This vulnerability is referenced as CVE-2026-108794. It is possible to launch the attack remotely. No exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More