Live › vulnerability › CVE-2026-110971
Płatnik software uses a weak algorithm to encode stored passwords, so anyone who obtains an encoded password can decode it easily. An attacker with access to that encoded value can recover the plain password.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 12:30 UTC. All times on this page are UTC.
Organizations running Płatnik software, the Polish payroll and social insurance software, are affected when they use a version before 10.02.002. The sources do not say which deployment modes or configurations are exposed. Teams not running Płatnik can skip it.
No product ranges from the sources yet.
10.02.00210.02.002 or later, which the sources say fixes this issue (metric 242)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.
This issue was fixed in metric 242 in version 10.02.002.
This page as .md · .json · in your agent: get_signal("CVE-2026-110971")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.