https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-110972/https://vulnfeed.org/cve/CVE-2026-110972/Fri, 30 Oct 2026 11:56:49 +0000Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.https://vulnfeed.org/cve/CVE-2026-110971/https://vulnfeed.org/cve/CVE-2026-110971/Fri, 30 Oct 2026 11:56:44 +0000Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode it. This issue was fixed in metric 334 in version 10.02.002.