Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-110972

Use of Client-Side Authentication in Płatnik

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Zak Ad Ubezpiecze Spo Ecznych
Products
P Atnik
CVE-2026-110970

Lack of traffic encryption in Płatnik

Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 334 in version 10.02.002.

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Zak Ad Ubezpiecze Spo Ecznych Zakład Ubezpieczeń Społecznych
Products
P Atnik Płatnik