Client-side authentication in Płatnik allows login as any user
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
Zakład Ubezpieczeń Społecznych Płatnik from 0 through 10.02.002 performs authentication on the client side (CWE-603). An attacker with access to any application instance connected to the backend server can bypass the login verification and authenticate as an arbitrary user, with no privileges or user interaction required.
Written with Claude Haiku 5.5 from the sources below · 2026-11-03
Description from the CNA
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Zakład Ubezpieczeń Społecznych | Płatnik | up to 10.02.002 | — | No fix listed | CNA |
- Płatnik VendorZakład Ubezpieczeń Społecznych Affected up to 10.02.002 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for Płatnik. The source description states that the issue was fixed in metric 334 in version 10.02.002.
Written with Claude Haiku 5.5 from the sources below · 2026-11-03
Timeline
- 2026-10-30 Threatist record created from CVE-2026-110972
- 2026-10-30 Alias added: GHSA-ww36-383p-7577
- 2026-10-30 CISA SSVC decision points changed
- 2026-10-30 Priority changed: MEDIUM → LOW
References
More Zakład Ubezpieczeń Społecznych vulnerabilities
- TI-2026-83040 Weak password encoding in Płatnik lets users decode passwords CVSS 4.0HIGH 7.7
- TI-2026-83039 Unencrypted HTTP downloads in Płatnik allow man-in-the-middle attacks CVSS 4.0LOW 2.3
Sources
- CVE-2026-110972 · CVE Program
- CVE-2026-110972 · NVD
- FIRST EPSS
- GHSA-ww36-383p-7577 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences