Vulnerability Description
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 242 in version 10.02.002.
Related Weaknesses (CWE)
References
- https://cert.pl/posts/2026/10/CVE-2026-110970
- https://www.zus.pl/firmy/program-platnik/o-programie-platnik
FAQ
What is CVE-2026-110972?
CVE-2026-110972 is a documented vulnerability. Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitr...
How severe is CVE-2026-110972?
CVSS scoring is not yet available for CVE-2026-110972. Check NVD for updates.
Is there a patch for CVE-2026-110972?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.