{"id":"CVE-2026-108796","published":"2026-10-12T04:16:48.173","lastModified":"2026-10-16T13:16:54.493","description":"A flaw has been found in ZKTeco BioTime 9.5.6 Build 20260130.3206. This affects an unknown part of the file /iclock/finger_data/ of the component Biometric Data Endpoint. Executing a manipulation of the argument emp_code can lead to authorization bypass. The attack can be launched remotely. Upgrading to version 9.5.6 Build 3623 is able to mitigate this issue. You should upgrade the affected component.","cvssScore":4.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-285","CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://vuldb.com/cve/CVE-2026-108796","tags":[]},{"url":"https://vuldb.com/submit/961689","tags":[]},{"url":"https://vuldb.com/vuln/416573","tags":[]},{"url":"https://vuldb.com/vuln/416573/cti","tags":[]},{"url":"https://www.zkteco.com/en/Security_Bulletinsibs/27","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}