CVE-2026-0809
NoneCVSS
—
EPSS
0.3%
Published
Mar 12, 2026
CISA due date
—
The record
Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-63424 During an internal security assessment, an improperly protected key was discovered in… CWE-261
- CVE-2026-40639 Dell Client Platform BIOS contains a Weak Encoding for Password vulnerability. CWE-261
- CVE-2026-25607 Use of a weak password encoding algorithm in STER software allows the value of the… CWE-261
- CVE-2025-11500 Tinycontrol devices such as tcPDU and LAN Controllers LK3.5, LK3.9 and LK4 have two… CWE-261
- CVE-2024-52334 A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). CWE-261
- CVE-2025-67652 An attacker with access to the project file could use the exposed credentials to… CWE-261
- CVE-2026-22543 The credentials required to access the device's web server are sent in base64 within the… CWE-261