CVE-2026-110970
NoneCVSS
—
EPSS
—
Published
Oct 30, 2026
CISA due date
—
The record
Płatnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own. This issue was fixed in metric 242 in version 10.02.002.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|