CVE-2016-20024
Critical · 9.8CVSS
9.8
EPSS
0.7%
Published
Mar 16, 2026
CISA due date
—
The record
ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files. Attackers can exploit world-writable permissions on the ZKTimeNet3.0 directory and its contents to replace executable files with malicious binaries for privilege escalation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-67361 Joomla Extension - j2commerce.com - Unauthenticated file upload with missing directory… CWE-538
- GHSA-9c83-rr99-vfwj MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at… CWE-538
- CVE-2026-50099 During WiFi association, Naxclow device firmware prints the host network’s SSID, PSK, and… CWE-538
- CVE-2026-50565 Fission is an open-source, Kubernetes-native serverless framework that simplifies the… CWE-538
- CVE-2026-46617 Fission is an open-source, Kubernetes-native serverless framework that simplifies the… CWE-538
- CVE-2026-29114 A vulnerability has been found in some Dahua products. CWE-538
- CVE-2019-25717 Dräger Infinity Delta, Delta XL, and Kappa patient monitors contain an information… CWE-538
- CVE-2026-10254 A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. CWE-538