Płatnik 軟體曝多項安全漏洞：HTTP、弱密碼、客戶端驗證缺陷
Vulnerabilities in Płatnik software
Płatnik 軟體（由 Zakład Ubezpieczeń Społecznych 開發）在 10.02.002 版本之前的所有版本均存在三項安全漏洞，分別為 HTTP 傳輸、弱密碼編碼與客戶端驗證問題。
此漏洞揭示公共系統在傳輸與身份驗證層面仍存重大風險，提示開發者重視 HTTPS 及強加密措施，並加速修補更新。
Vulnerabilities in Płatnik software
| CVE ID | CVE-2026-110970 |
| Publication date | 30 October 2026 |
| Vendor | Zakład Ubezpieczeń Społecznych |
| Product | Płatnik |
| Vulnerable versions | All before metric 242 in version 10.02.002 |
| Vulnerability type (CWE) | Reliance on HTTP instead of HTTPS (CWE-1428) |
| Report source | Report to CERT Polska |
| CVE ID | CVE-2026-110971 |
| Publication date | 30 October 2026 |
| Vendor | Zakład Ubezpieczeń Społecznych |
| Product | Płatnik |
| Vulnerable versions | All before metric 242 in version 10.02.002 |
| Vulnerability type (CWE) | Weak encoding for password (CWE-261) |
| Report source | Report to CERT Polska |
| CVE ID | CVE-2026-110972 |
| Publication date | 30 October 2026 |
| Vendor | Zakład Ubezpieczeń Społecznych |
| Product | Płatnik |
| Vulnerable versions | All before metric 242 in version 10.02.002 |
| Vulnerability type (CWE) | Use of Client-Side authentication (CWE-603) |
| Report source | Report to CERT Polska |
Description
CERT Polska has received a report about vulnerabilities in Płatnik software maintained by Zakład Ubezpieczeń Społecznych and participated in coordination of their disclosure.
The vulnerability CVE-2026-110970: Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own.
The vulnerability CVE-2026-110971: Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it.
The vulnerability CVE-2026-110972: Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.
These issues were fixed in metric 242 in version 10.02.002.
Credits
We thank Wojciech Giełda for the responsible report of the vulnerabilities CVE-2026-110971 and CVE-2026-110972.
More about the coordinated vulnerability disclosure process at CERT Polska can be found at https://cert.pl/en/cvd/.