Vulnerability in Streamsoft Prestiż
CVE-2026-0809
Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.
EPSS: 0.002 (16.4th percentile) — read the EPSS interpretation.
Affected products
- Streamsoft Prestiż — versions 12.2.363.17
Weakness classification (CWE)
References
- cvd@cert.pl (product)
- cvd@cert.pl (third-party-advisory)