CVE-2026-110971
Received Received - Intake

Weak Password Encoding in Płatnik Software

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: CERT.PL

Description
Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.  This issue was fixed in metric 242 in version 10.02.002.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-110971
EUVD
EUVD-2026-113775

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Zakład Ubezpieczeń Społecznych Płatnik 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-261 Obscuring a password with a trivial encoding does not protect the password.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 242 in version 10.02.002.

Impact Analysis

An attacker who steals encoded passwords could decode them to gain access to user accounts, potentially leading to unauthorized access to sensitive data or system functions.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or health data, violating GDPR or HIPAA requirements for data protection and access control.

Mitigation Strategies

Update Płatnik software to version 10.02.002 or later where the issue is fixed in metric 242.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110971. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart