[ CVE-2026-110972 · Published 30 Oct 2026 ]
Vulnerability in Zakład Ubezpieczeń Społecznych Płatnik
CVSS 8.6
EPSS <1%No fix listed yet
[ Description ]Official description
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.