NVD security advisory
Security advisory for Płatnik performs client-side authentication
CVE-2026-110972
Full advisory details, affected packages, severity context, and original source.
Affected technology
Płatnik performs client-side authenticationAffected product
Advisory overview
Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 242 in version 10.02.002.