Płatnik vulnerabilities

2 known vulnerabilities in Płatnik from Zakład Ubezpieczeń Społecznych. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Płatnik: Use of Client-Side Authentication

  CVE-2026-110972Oct 30, 2026Zakład Ubezpieczeń Społecznych

  Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.0

• 7.7 High severity

  Płatnik: Weak Encoding for Password

  CVE-2026-110971Oct 30, 2026Zakład Ubezpieczeń Społecznych

  Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002.