Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-108794

ZKTeco BioTime Database Migration Functionality db_migrate_setting sql injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security vulnerability has been detected in ZKTeco BioTime 9.5.6 Build 20260130.3206. Affected by this vulnerability is an unknown functionality of the file /base/api/v1.0/systemSettings/db_migrate_setting/ of the component Database Migration Functionality. Such manipulation leads to sql injection. It is possible to launch the attack remotely. Upgrading to version 9.5.6 Build 3623 addresses this issue. Upgrading the affected component is advised.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ZKTeco BioTime

  • 9.5.6 Build 20260130.3206affected
  • 9.5.6 Build 3623unaffected

References