Zkteco Inc. Zkteco Zkbiosecurity
6 CVEs affecting Zkteco Inc. Zkteco Zkbiosecurity. Latest disclosed: 2026-03-16. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-20030 | Critical | 9.8 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains a user enumeration vulnerability that allows unauthenticated attackers to discover valid usernames by submitting partial char… |
CVE-2016-20026 | Critical | 9.8 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains hardcoded credentials in the bundled Apache Tomcat server that allow unauthenticated attackers to access the manager applicat… |
CVE-2016-20029 | Medium | 6.2 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrie… |
CVE-2016-20027 | Medium | 6.1 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by inj… |
CVE-2016-20031 | Medium | 5.5 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by… |
CVE-2016-20028 | Medium | 4.3 | 2026-03-16 | ZKTeco ZKBioSecurity 3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in user… |