EUVD Vulnerability Catalog
EUVD-2026-113774
Severity: LOW
Base Score: 2.3
CVSS Version: 4.0
Vulnerability Description
Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own.
This issue was fixed in metric 242 in version 10.02.002.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Attack Requirements (AT): Present
▪
Privileges Required (PR): None
▪
User Interaction (UI): Passive
▪
Vulnerability Confidentiality Impact (VC): Low
▪
Vulnerability Integrity Impact (VI): Low
▪
Vulnerability Availability Impact (VA): None
▪
Subsequent Confidentiality Impact (SC): None
▪
Subsequent Integrity Impact (SI): None
▪
Subsequent Availability Impact (SA): None
Affected Vendors & Systems
Vendor
Zakład Ubezpieczeń Społecznych
References & Advisory Links
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
CERT-PL
EPSS Probability
0
Known Aliases
CVE-2026-110970
Published On
2026-10-30
Last Updated
2026-10-30