CVE-2026-110972
Use of Client-Side Authentication in Płatnik
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 242 in version 10.02.002.
| CWE | CWE-603 |
| Vendor | zakład ubezpieczeń społecznych |
| Product | płatnik |
| Published | Oct 30, 2026 |
| Last Updated | Oct 30, 2026 |
Stay Ahead of the Next One
Get instant alerts for zakład ubezpieczeń społecznych płatnik
Be the first to know when new unknown vulnerabilities affecting zakład ubezpieczeń społecznych płatnik are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Zakład Ubezpieczeń Społecznych / Płatnik
0 ≤ 10.02.002
References
Credits
Wojciech Giełda