[ Vendor · 3 CVEs ]
Krajowa Izba Rozliczeniowa
CVEs affecting Krajowa Izba Rozliczeniowa published in the last 30 days, plus any Krajowa Izba Rozliczeniowa CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-93570 | 29 Oct 2026 | CVSS 8.2 | Krajowa Izba Rozliczeniowa SzafirSzafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a… | |
| CVE-2026-93571 | 29 Oct 2026 | CVSS 2.3 | Krajowa Izba Rozliczeniowa SzafirSzafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can… | |
| CVE-2026-106036 | 29 Oct 2026 | CVSS 6.9 | Krajowa Izba Rozliczeniowa SzafirSzafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without… |