CVE-2024-35433: ZKTeco Zkbio Cvsecurity

High severity, CVSS 8.1. EPSS: 0.5% chance of exploitation in the next 30 days.

ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Incorrect Access Control. An authenticated user, without the permissions of managing users, can create a new admin user.

Affected products

• ZKTeco Zkbio Cvsecurity: version 6.1.1 only

Published 2024-05-30. Last modified 2026-06-17.