CVE-2026-108797

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...

CVE-2026-108797 ZKTeco BioTime Employee REST API employees authorization

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...

CVE-2026-108797 ZKTeco BioTime Employee REST API employees authorization

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...

EUVD-2026-97168

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. The vendor was...

CVE-2026-108797

A vulnerability exists in ZKTeco BioTime version 9.5.6 Build 20260130.3206 within the Employee REST API component. Specifically, unknown code in the file /personnel/api/employees/ is susceptible to manipulation, leading to an authorization bypass . This attack can be initiated remotely . No speci...

PT-2026-110437

Name of the Vulnerable Software and Affected Versions ZKTeco BioTime version 9.5.6 Build 20260130.3206 Description An authorization bypass exists in the Employee REST API component. A remote attacker can manipulate the '/personnel/api/employees/' endpoint to bypass security checks. Recommendation...

CVE-2026-108797: Authorization Bypass Through User-Controlled Key

A vulnerability has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This vulnerability affects unknown code of the file /personnel/api/employees/ of the component Employee REST API. The manipulation leads to authorization bypass. The attack may be initiated remotely. Upgrading to version...