CVE-2026-110971

EUVD-2026-113775
Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. 


This issue was fixed in metric 242 in version 10.02.002.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.7 HIGH
ADJACENT
HIGH
NONE
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://cert.pl/posts/2026/10/CVE-2026-110970
https://www.zus.pl/firmy/program-platnik/o-programie-platnik