Advisories · Technology

ZKTeco Inc. ZKTeco ZKBioSecurity.

Every CVE that names ZKTeco Inc. ZKTeco ZKBioSecurity among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2016-20031 CVE record

CVSS 6.8 Medium

ZKTeco ZKBioSecurity 3.0 Local Authorization Bypass via visLogin.jsp
- ZKTeco Inc. ZKTeco ZKBioSecurity
- Hard-coded credentials
Not analysed yet 15 Mar 2026
CVE-2016-20030 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

ZKTeco ZKBioSecurity 3.0 User Enumeration via authLoginAction
- ZKTeco Inc. ZKTeco ZKBioSecurity
- CWE-551
Not analysed yet 15 Mar 2026
CVE-2016-20029 CVE record

CVSS 6.9 Medium

ZKTeco ZKBioSecurity 3.0 File Path Manipulation Vulnerability
- ZKTeco Inc. ZKTeco ZKBioSecurity
- Broken access control
Not analysed yet 15 Mar 2026
CVE-2016-20028 CVE record

CVSS 5.3 Medium

ZKTeco ZKBioSecurity 3.0 Cross-Site Request Forgery Superadmin
- ZKTeco Inc. ZKTeco ZKBioSecurity
- Cross-site request forgery (CSRF)
Not analysed yet 15 Mar 2026
CVE-2016-20027 CVE record

CVSS 5.1 Medium

ZKTeco ZKBioSecurity 3.0 Multiple Reflected XSS Vulnerabilities
- ZKTeco Inc. ZKTeco ZKBioSecurity
- Cross-site scripting (XSS)
Not analysed yet 15 Mar 2026
CVE-2016-20026 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote Code Execution
- ZKTeco Inc. ZKTeco ZKBioSecurity
- Hard-coded credentials
Not analysed yet 15 Mar 2026