Read the docs
TI-2026-07556 Aliases CVE-2026-8598GHSA-r827-rrrf-hq75

Unauthenticated Export Service in ZKTeco CCTV Cameras

Priority MEDIUM 48CWE-288Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-288.

Summary

An undocumented configuration export port is accessible on some models of ZKTeco CCTV cameras. This port does not require authentication and exposes critical information about the camera such as open services and camera account credentials.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00507 43rd percentileScored 2026-11-07
Fix Fixed SSC335-GC2063-Face-0b77 Solution Camera (ZKTeco): V5.0.1.2.20260421

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ZKTecoSSC335-GC2063-Face-0b77 Solution Camerabefore V5.0.1.2.20260421V5.0.1.2.20260421Patch availableCNA
  • SSC335-GC2063-Face-0b77 Solution Camera VendorZKTeco Affected before V5.0.1.2.20260421 Fixed in V5.0.1.2.20260421 Patch available CNA

Remediation

  • Fix · CNA SSC335-GC2063-Face-0b77 Solution Camera (ZKTeco) Fixed in V5.0.1.2.20260421

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-8598
  2. 2026-10-03 Alias added: GHSA-r827-rrrf-hq75

References

Advisory 1

Other 2

  • TI-2023-20210 A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows… KEVCVSS 3.1HIGH 7.5
  • TI-2025-28829 Hard-coded credentials in ZKTeco ZKBio CVSecurity CVSS 3.1CRITICAL 9.8
  • TI-2024-24297 ZKTeco ZKBio CVSecurity v6.1.1 was discovered to contain a hardcoded cryptographic key. CVSS 3.1CRITICAL 9.8
  • TI-2023-20211 ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated… CVSS 3.1CRITICAL 9.8
  • TI-2016-09202 ZKTeco ZKBioSecurity 3.0 Hardcoded Credentials Remote Code Execution CVSS 4.0CRITICAL 9.3
  • TI-2016-09200 ZKTeco ZKTime.Net 3.0.1.6 Insecure File Permissions Privilege Escalation CVSS 4.0CRITICAL 9.3
See all 70 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences