CVE-2026-110972 — 脆弱性インテリジェンス

—

公表日: 2026-10-30T12:16:34.803

CVSS

8.6

CISA KEV

未掲載（悪用がないことを意味しません）

情報源の原文（翻訳ではありません）

Płatnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user. This issue was fixed in metric 334 in version 10.02.002.

情報源

• CVE-2026-110972
• Original advisory
• Original advisory