Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2026-110970

Lack of traffic encryption in Płatnik

Description

Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 242 in version 10.02.002.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zakład Ubezpieczeń Społecznych Płatnik

Default version status: unaffected

  • 0 to ≤ 10.02.002affected

References