CVE-2024-35430: ZKTeco Zkbio Cvsecurity

High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days.

In ZKTeco ZKBio CVSecurity v6.1.1_R and earlier (fixed in 6.1.3_R) an authenticated user can bypass password checks while exporting data from the application.

Affected products

• ZKTeco Zkbio Cvsecurity: version 6.1.1 only

Published 2024-05-30. Last modified 2026-06-17.