CVE-2016-20029

ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources. Attackers can manipulate path parameters to bypass access controls and retrieve sensitive information including configuration files, source code, and protected application resources.

CVSS v4.0

6.9 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.21% chance of exploitation in the next 30 days, 11th percentile

Published

2026-03-15

Updated

2026-07-28

Proof-of-concept exploits (2)

• https://packetstormsecurity.com/files/138570
• https://www.exploit-db.com/exploits/40326/

References

• CVE Record
• NVD entry

Related

• CVE-2016-20028
• CVE-2016-20030
• CVE-2016-20027
• CVE-2016-20031
• CVE-2016-20026
• CVE-2016-20032