{"id":"CVE-2026-110971","title":"Weak password encoding in Płatnik","summary":"Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. \n\n\nThis issue was fixed in metric 334 in version 10.02.002.","severity":"high","cvss":7.7,"cvssVector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","cvssSource":"cna","cwe":["CWE-261"],"vendor":"Zakład Ubezpieczeń Społecznych","product":"Płatnik","affected":["Płatnik <= 10.02.002"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-30T15:30:23.448311Z"},"published":"2026-10-30","updated":"2026-11-03","sourceUpdated":"2026-11-03T09:13:15.367Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-110971","references":[{"url":"https://cert.pl/posts/2026/10/CVE-2026-110970"},{"url":"https://www.zus.pl/firmy/program-platnik/o-programie-platnik"}],"tags":["cve.org"],"epss":0.0017,"epssPercentile":0.06427,"ingestedAt":"2026-11-05T19:30:42.934Z","slug":"CVE-2026-110971","body":"## Overview\n\nUse of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. \n\n\nThis issue was fixed in metric 334 in version 10.02.002.\n\n## Affected\n\n- `Płatnik <= 10.02.002`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}