Krajowa Izba Rozliczeniowa Szafir
3 CVEs affecting Krajowa Izba Rozliczeniowa Szafir. Latest disclosed: 2026-10-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-93571 | | 2026-10-29 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitr… | |
CVE-2026-93570 | | 2026-10-29 | Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injection. When a user signs or verify a crafted XML file containing a `DOCTYPE` wit… | |
CVE-2026-106036 | | 2026-10-29 | Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the r… |