CVE-2026-110972

— UNSCORED

Published 2026-10-30 · Updated 2026-10-30

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 242 in version 10.02.002.

Weaknesses

CWE-603

All references

https://cert.pl/posts/2026/10/CVE-2026-110970
https://www.zus.pl/firmy/program-platnik/o-programie-platnik

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-90983

Related by shared AI tags and CWE weakness class. Browse the full archive.