CVE-2026-110971

CVSS 7.7 (high) · published 2026-10-30

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.  This issue was fixed in metric 334 in version 10.02.002.

Weakness: CWE-261

Source: NVD CVE-2026-110971

References

• https://cert.pl/posts/2026/10/CVE-2026-110970
• https://www.zus.pl/firmy/program-platnik/o-programie-platnik

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.