CVE-2026-110972High· 8.6▾ TwilightPłatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.
This issue was fixed in metric 334 in version 10.02.002.
Płatnik <= 10.02.002Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-110970Low· 2.3Lack of traffic encryption in Płatnik
CVE-2026-110971High· 7.7Weak password encoding in Płatnik
CVE-2026-90983High· 8.2Use of Client-Side authentication vulnerability in Hayat Health Facilities Inc
CVE-2026-71187Critical· 9.8Ebyte NA111-M Use of Client-Side Authentication
CVE-2026-76945High· 7.5Ebyte NE2-D11 Use of Client-Side Authentication
CVE-2026-40551High· 8.4Multiple BinSoft products perform client-side authentication