ZKTeco ZKBio CVSecurity

• CVE-2025-45746 Medium 6.5 In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this 0.4%