https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T05:10:24.864478+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341547 EUVD-2026-341547 2026-10-15T05:10:24.867043+00:00 EUVD-2026-341547 https://cve.radiocsirt.org/vuln/fkie_cve-2016-20031 fkie_cve-2016-20031 2026-10-15T05:10:24.867077+00:00

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp() method which treats IPv6 loopback address 0:0:0:0:0:0:0:1 as 127.0.0.1 and authenticates using the IP as username with hardcoded password 123456 to access sensitive information and perform unauthorized actions.

 https://cve.radiocsirt.org/vuln/ghsa-vq34-m74g-f6mp GHSA-vq34-m74g-f6mp 2026-10-15T05:10:24.867110+00:00

ZKTeco ZKBioSecurity 3.0 contains a local authorization bypass vulnerability in visLogin.jsp that allows attackers to authenticate without valid credentials by spoofing localhost requests. Attackers can exploit the EnvironmentUtil.getClientIp() method which treats IPv6 loopback address 0:0:0:0:0:0:0:1 as 127.0.0.1 and authenticates using the IP as username with hardcoded password 123456 to access sensitive information and perform unauthorized actions.