{"metadata": {"vulnerability": "CVE-2026-110970", "count": 16, "kinds": {"milestone": 4, "sighting": 4, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-10-15T10:24:54.756Z", "date_only": false, "value": "2026-10-15T10:24:54.756Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-30T04:55:00Z", "date_only": false, "value": "2026-10-30T04:55:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cert.pl/en/posts/2026/10/CVE-2026-110970", "record": "CVE-2026-110970", "field": "creation_timestamp", "uuid": "66789eac-82da-45b8-9e23-07fada0950db", "url": "https://cert.pl/en/posts/2026/10/CVE-2026-110970"}, {"timestamp": "2026-10-30T11:56:39.165Z", "date_only": false, "value": "2026-10-30T11:56:39.165Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T11:56:39.165Z", "date_only": false, "value": "2026-10-30T11:56:39.165Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CERT-PL", "record": "CVE-2026-110970", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T12:16:34Z", "date_only": false, "value": "2026-10-30T12:16:34Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-28PV-83VG-WWMR", "record": "GHSA-28PV-83VG-WWMR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-30T12:16:34.530Z", "date_only": false, "value": "2026-10-30T12:16:34.530", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110970", "record": "FKIE_CVE-2026-110970", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T12:17:39.005Z", "date_only": false, "value": "2026-10-30T12:17:39.005483Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529815187837124", "record": "CVE-2026-110970", "field": "creation_timestamp", "uuid": "7b8a0fdd-023b-4c15-b9d7-eb1f49b41604", "content": "CVE-2026-110970 Lack of traffic encryption in P\u0142atnik P\u0142atnik uses HTTP protocol to download updates, libraries and support files. It allows an attacker to conduct a Man-In-The-Middle attack, obtain transmitted data and replace the original files with their own.\nThis issue was fixed in metric 242 in version 10.02.002.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110970https://cert.pl/posts/2026/10/CVE-2026-110970https://www.zus.pl/firmy/program-platnik/o-programie-platnik#Zak\u0142adUbezpiecze\u0144Spo\u0142ecznych #P\u0142atnik#CVE_2026_110970#bot", "url": "https://infosec.exchange/users/cve/statuses/117529815187837124"}, {"timestamp": "2026-10-30T12:18:19.307Z", "date_only": false, "value": "2026-10-30T12:18:19.307580Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529817831148222", "record": "CVE-2026-110970", "field": "creation_timestamp", "uuid": "ed3ab8e8-d9df-4958-adad-9b9e4c959e06", "content": "CVE-2026-110971 Weak password encoding in P\u0142atnik Use of a weak password encoding algorithm in P\u0142atnik software allows a user who obtains encoded password to easily decode it. \nThis issue was fixed in metric 242 in version 10.02.002.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110971https://cert.pl/posts/2026/10/CVE-2026-110970https://www.zus.pl/firmy/program-platnik/o-programie-platnik#Zak\u0142adUbezpiecze\u0144Spo\u0142ecznych #P\u0142atnik#CVE_2026_110971#bot", "url": "https://infosec.exchange/users/cve/statuses/117529817831148222"}, {"timestamp": "2026-10-30T12:19:01.166Z", "date_only": false, "value": "2026-10-30T12:19:01.166522Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117529820474508267", "record": "CVE-2026-110970", "field": "creation_timestamp", "uuid": "60ac6bde-31fe-4ed2-af7e-d5a61e597e8d", "content": "CVE-2026-110972 Use of Client-Side Authentication in P\u0142atnik P\u0142atnik performs client-side authentication. An attacker with access to any application instance connected to the backend server can bypass the login verification process and authenticate as an arbitrary user.\nThis issue was fixed in metric 242 in version 10.02.002.\nhttps://www.cve.org/CVERecord?id=CVE-2026-110972https://cert.pl/posts/2026/10/CVE-2026-110970https://www.zus.pl/firmy/program-platnik/o-programie-platnik#Zak\u0142adUbezpiecze\u0144Spo\u0142ecznych #P\u0142atnik#CVE_2026_110972#bot", "url": "https://infosec.exchange/users/cve/statuses/117529820474508267"}, {"timestamp": "2026-10-30T12:31:16Z", "date_only": false, "value": "2026-10-30T12:31:16Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-28PV-83VG-WWMR", "record": "GHSA-28PV-83VG-WWMR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-30T12:31:16Z", "date_only": false, "value": "2026-10-30T12:31:16Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-28PV-83VG-WWMR", "record": "GHSA-28PV-83VG-WWMR", "field": "modified"}, {"timestamp": "2026-10-30T15:29:49.098Z", "date_only": false, "value": "2026-10-30T15:29:49.098740Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110970", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T15:29:49.098Z", "date_only": false, "value": "2026-10-30T15:29:49.098740Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110970", "record": "FKIE_CVE-2026-110970", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-30T15:30:01.665Z", "date_only": false, "value": "2026-10-30T15:30:01.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T15:30:01.665Z", "date_only": false, "value": "2026-10-30T15:30:01.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110970", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T19:39:14.897Z", "date_only": false, "value": "2026-10-30T19:39:14.897", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110970", "record": "FKIE_CVE-2026-110970", "field": "lastModified"}], "metrics": {"as_of": "2026-10-31T11:21:56.445Z", "anchors": {"origin": {"timestamp": "2026-10-30T11:56:39.165Z", "date_only": false, "value": "2026-10-30T11:56:39.165Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-30T11:56:39.165Z", "date_only": false, "value": "2026-10-30T11:56:39.165Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 84317.280271, "hours": 23.421466741944442, "days": 0.9758944475810185, "min_seconds": 84317.280271, "max_seconds": 84317.280271, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-30T11:56:39.165Z", "date_only": false, "value": "2026-10-30T11:56:39.165Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110970", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-31T11:21:56.445Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}