CVE-2026-110971: Weak password encoding in Płatnik

Published Oct 30, 2026

Updated

Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.

This issue was fixed in metric 242 in version 10.02.002.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Płatnik to a version that resolves this vulnerability.
Fixed in 10.02.002Patch metric 242

Oct 30, 2026

CVE Published

via MITRE·11:56 AM

Data Sourced

via MITRE·11:56 AM

DescriptionWeakness

Data Sourced

via NVD·12:16 PM

DescriptionSeverityWeakness

The attacker needs to obtain an encoded password. The available information does not state how such an encoded password could be obtained.

The issue was fixed in metric 242 in version 10.02.002.