6.3Orta
CVE-2026-0809Weak KSeF token encoding in Streamsoft Prestiż
Açıklama
Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.
Zayıflık türü (CWE):
CWE-261
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Streamsoft | Streamsoft Prestiż | 12.2.363.17 – < 20.0.380.92 |
Kaynaklar ve yamalar
- https://www.streamsoft.pl/streamsoft-prestiz/ product
- https://cert.pl/posts/2026/03/CVE-2026-0809 third-party-advisory