Vulnerability Description
Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 242 in version 10.02.002.
References
- https://cert.pl/posts/2026/10/CVE-2026-110970
- https://www.zus.pl/firmy/program-platnik/o-programie-platnik
FAQ
What is CVE-2026-110970?
CVE-2026-110970 is a documented vulnerability. Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with th...
How severe is CVE-2026-110970?
CVSS scoring is not yet available for CVE-2026-110970. Check NVD for updates.
Is there a patch for CVE-2026-110970?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.