CERT Polska

Vulnerability in Apereo CAS Client software

CERT Polska — Fri, 24 Jul 2026 11:55:00 +0100

Improper certificate validation vulnerability (CVE-2026-15243) has been found in Apereo CAS Client software.

Vulnerabilities in GNU coreutils software

CERT Polska — Fri, 24 Jul 2026 09:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56391 and CVE-2026-56392) found in GNU coreutils software.

Vulnerability in GNU diffutils software

CERT Polska — Wed, 22 Jul 2026 14:55:00 +0100

Integer Overflow vulnerability (CVE-2026-53910) has been found in GNU diffutils software.

Vulnerability in Open Mercato software

CERT Polska — Wed, 22 Jul 2026 11:55:00 +0100

Denial of Service via unsafe regex vulnerability (CVE-2026-16270) has been found in Open Mercato software.

Vulnerabilities in Windu CMS software

CERT Polska — Mon, 20 Jul 2026 14:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-57309 to CVE-2026-57311) found in Windu CMS software.

Vulnerabilities in ICU Scandinavia Boomerang software

CERT Polska — Wed, 15 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-46458 and CVE-2026-46459) found in ICU Scandinavia Boomerang software.

Vulnerability in 4real ThemisNETPanel software

CERT Polska — Mon, 13 Jul 2026 14:55:00 +0100

Unauthenticated Remote Code Execution (CVE-2026-6847) has been found in 4real ThemisNETPanel software.

Vulnerabilities in GNU gawk software

CERT Polska — Mon, 13 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-40467 to CVE-2026-40469 and CVE-2026-40553) found in GNU gawk software.

Vulnerability in BitWizard mtr software

CERT Polska — Fri, 10 Jul 2026 12:55:00 +0100

Out-of-bounds read vulnerability (CVE-2026-14461) has been found in BitWizard mtr software.

Vulnerabilities in R-SOFT DMS software

CERT Polska — Fri, 10 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-41876 to CVE-2026-41880) found in R-SOFT DMS software.

Vulnerability in SOPlanning software

CERT Polska — Thu, 09 Jul 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-50644) has been found in SOPlanning software.

Vulnerabilities in GNU patch software

CERT Polska — Thu, 09 Jul 2026 09:05:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-56288 and CVE-2026-56289) found in GNU patch software.

Vulnerabilities in OpenIDC liboauth2 software

CERT Polska — Thu, 02 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-54430 and CVE-2026-54431) found in OpenIDC liboauth2 software.

Vulnerabilities in MyComplianceOffice MCO software

CERT Polska — Wed, 01 Jul 2026 11:55:00 +0100

CERT Polska has received a report about 8 vulnerabilities (from CVE-2026-53902 to CVE-2026-53909) found in MyComplianceOffice MCO software.

Vulnerabilities in KTM System e-BOK software

CERT Polska — Tue, 30 Jun 2026 15:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-35095 to CVE-2026-35098) found in KTM System e-BOK software.

Vulnerabilities in fzf software

CERT Polska — Tue, 30 Jun 2026 14:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-53432 and CVE-2026-53433) found in fzf software.

Vulnerabilities in Redeight CMS software

CERT Polska — Tue, 30 Jun 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-53690 to CVE-2026-53692) found in Redeight CMS software.

Vulnerability in Raytha CMS software

CERT Polska — Tue, 30 Jun 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-12076) has been found in Raytha CMS software.

Vulnerability in libxml2 software

CERT Polska — Mon, 29 Jun 2026 14:20:00 +0100

Stack-based Buffer Overflow vulnerability (CVE-2026-11979) has been found in libxml2 software.

Vulnerability in SzafirHost software

CERT Polska — Mon, 29 Jun 2026 13:55:00 +0100

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-13165) has been found in SzafirHost software.

Vulnerabilities in gzip software

CERT Polska — Mon, 29 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-41991 and CVE-2026-41992) found in gzip software.

Vulnerability in DRIMO CMS software

CERT Polska — Tue, 23 Jun 2026 12:55:00 +0100

Reflected Cross-site Scripting vulnerability (CVE-2026-11772) has been found in DRIMO CMS software.

Vulnerability in Totolink EX1200L router software

CERT Polska — Tue, 23 Jun 2026 11:55:00 +0100

Stack-based Buffer Overflow vulnerability (CVE-2026-44089) has been found in Totolink EX1200L router software.

Vulnerabilities in UBB.threads software

CERT Polska — Thu, 18 Jun 2026 13:55:00 +0100

CERT Polska has received a report about 6 vulnerabilities (from CVE-2026-54219 to CVE-2026-54224) found in UBB.threads software.

Vulnerabilities in LMS software

CERT Polska — Thu, 18 Jun 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40455 to CVE-2026-40457) found in LMS (LAN Management System) software.

Vulnerability in 8cc compiler

CERT Polska — Thu, 18 Jun 2026 11:55:00 +0100

Out-of-bounds Read vulnerability (CVE-2026-50643) has been found in 8cc compiler.

Vulnerability in jansi library

CERT Polska — Tue, 16 Jun 2026 11:55:00 +0100

Heap-based Buffer Overflow vulnerability (CVE-2026-8484) has been found in jansi library.

Vulnerability in Responsive FileManager software

CERT Polska — Mon, 15 Jun 2026 12:55:00 +0100

Remote Code Execution via Unrestricted File Upload vulnerability (CVE-2026-5482) has been found in Responsive FileManager software.

Vulnerability in Quick.CMS software

CERT Polska — Mon, 15 Jun 2026 11:55:00 +0100

Deserialization of Untrusted Data vulnerability (CVE-2026-11860) has been found in Quick.CMS software.

UNC1151/Ghostwriter phishing campaign targeting Gmail accounts

CERT Polska — Fri, 12 Jun 2026 12:00:00 +0100

Recently, we have been observing attacks by the UNC1151/Ghostwriter group targeting Gmail accounts. This group has been regularly attacking the mailboxes of Polish citizens for several years, although in the past these attacks focused on other email providers. The techniques used evolve over time, but the core theme of the messages and their objective remain unchanged.

Vulnerability in Golem OEE MES software

CERT Polska — Thu, 11 Jun 2026 11:55:00 +0100

Path Traversal vulnerability (CVE-2026-8464) has been found in Golem OEE MES software.

Vulnerability in Aix-DB software

CERT Polska — Wed, 10 Jun 2026 11:55:00 +0100

Missing Authentication for Critical Function vulnerability (CVE-2026-8335) has been found in Aix-DB software.

Vulnerabilities in Logseq software

CERT Polska — Tue, 09 Jun 2026 14:55:00 +0100

CERT Polska has received a report about 4 vulnerabilities (CVE-2026-9279 and from CVE-2026-47899 to CVE-2026-47901) found in Logseq software.

Vulnerabilities in school-management-system software

CERT Polska — Wed, 03 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-47324 and CVE-2026-47325) found in school-management-system software.

Vulnerabilities in Wirtualna Uczelnia software

CERT Polska — Tue, 02 Jun 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-34906 and CVE-2026-34907) found in Wirtualna Uczelnia software.

Vulnerability in KS-SOMED software

CERT Polska — Mon, 01 Jun 2026 13:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2026-42251) has been found in KS-SOMED software.

Vulnerabilities in SOPlanning software

CERT Polska — Mon, 01 Jun 2026 09:55:00 +0100

CERT Polska has received a report about 7 vulnerabilities (from CVE-2026-40543 to CVE-2026-40549) found in SOPlanning software.

Vulnerabilities in QuickCMS software

CERT Polska — Fri, 29 May 2026 15:15:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-33384 and CVE-2026-33386) found in QuickCMS software.

Vulnerability in Kidsview application

CERT Polska — Thu, 28 May 2026 14:55:00 +0100

Authentication Bypass vulnerability (CVE-2026-8990) has been found in Kidsview software.

Vulnerability in bzip2 software

CERT Polska — Thu, 28 May 2026 13:15:00 +0100

Out-of-bounds Write vulnerability (CVE-2026-42250) has been found in bzip2 software.

Vulnerability in D-Link DWR-X1820 router

CERT Polska — Thu, 28 May 2026 12:55:00 +0100

Use of Weak Credentials vulnerability (CVE-2026-4377) has been found in DWR-X1820 router.

Vulnerabilities in Slican telephone exchanges software

CERT Polska — Wed, 27 May 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35087, CVE-2026-35089 and CVE-2026-35090) found in Slican telephone exchanges software.

Vulnerability in Szafir SDK software

CERT Polska — Mon, 25 May 2026 15:55:00 +0100

Improper Certificate Verification vulnerability (CVE-2026-9058) has been found in Szafir SDK software.

Vulnerability in Kenik cameras software

CERT Polska — Mon, 25 May 2026 12:55:00 +0100

Path Traversal vulnerability (CVE-2026-7766) has been found in Kenik cameras software.

Vulnerability in Lifetime software

CERT Polska — Mon, 25 May 2026 11:55:00 +0100

Authorization Bypass Through User-Controlled Key vulnerability (CVE-2026-40127) has been found in OutSystems Lifetime software.

Vulnerability in vifm software

CERT Polska — Fri, 22 May 2026 14:55:00 +0100

Heap-based Buffer Overflow vulnerability (CVE-2026-8997) has been found in vifm software.

Vulnerabilities in STER software

CERT Polska — Fri, 22 May 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-25606 to CVE-2026-25608) found in STER software.

Autonomous fuzzing process under LLM supervision

CERT Polska — Thu, 21 May 2026 13:37:00 +0100

The CCN project is co-financed by the European Regional Development Fund and the State Budget under the European Funds for Digital Development Programme 2021-2027.

Fuzzing is an automated software testing technique that involves feeding random or deliberately malformed input data to detect bugs and security vulnerabilities. For years it has …

Vulnerability in Request Tracker software

CERT Polska — Thu, 21 May 2026 11:55:00 +0100

Cross-site Scripting vulnerability (CVE-2026-6841) has been found in Request Tracker software.

Vulnerabilities in Sparx Systems products

CERT Polska — Tue, 19 May 2026 10:55:00 +0100

CERT Polska has received a report about 5 vulnerabilities (from CVE-2026-42096 to CVE-2026-42100) found in Sparx Systems products: Pro Cloud Server and Enterprise Architect.

Vulnerabilities in DHTMLX software

CERT Polska — Fri, 15 May 2026 12:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-7182, CVE-2026-41552 and CVE-2026-41553) found in DHTMLX software.

Vulnerability in SzafirHost software

CERT Polska — Fri, 15 May 2026 11:55:00 +0100

Unrestricted Upload of File with Dangerous Type vulnerability (CVE-2026-44088) has been found in SzafirHost software.

Vulnerability in Verint Verba software

CERT Polska — Thu, 14 May 2026 15:00:00 +0100

Cross-site Scripting vulnerability (CVE-2026-21730) has been found in Verba software.

Vulnerability in WEBCON BPS software

CERT Polska — Thu, 14 May 2026 14:55:00 +0100

Cross-site Scripting vulnerability (CVE-2026-1630) has been found in WEBCON BPS software.

Vulnerabilities in Comarch ERP Optima software

CERT Polska — Thu, 14 May 2026 13:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-68420 and CVE-2025-68421) found in Comarch ERP Optima software.

Vulnerability in simdjson library

CERT Polska — Thu, 14 May 2026 11:55:00 +0100

Integer Overflow vulnerability (CVE-2026-8295) has been found in simdjson library.

Vulnerability in Code Runner MCP Server project

CERT Polska — Tue, 12 May 2026 11:55:00 +0100

Missing Authentication for Critical Function vulnerability (CVE-2026-5029) has been found in Code Runner MCP Server software.

Vulnerabilities in ATutor software

CERT Polska — Mon, 11 May 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-6909 and CVE-2026-6956) found in ATutor software.

Vulnerability in GW1101-1D(RS-485)-TB-P modbus gateways

CERT Polska — Mon, 04 May 2026 15:55:00 +0100

OS Command Injection vulnerability (CVE-2025-13605) has been found in 3onedata GW1101-1D(RS-485)-TB-P modbus gateways.

Vulnerability in LEX Baza Dokumentów software

CERT Polska — Thu, 30 Apr 2026 11:55:00 +0100

Cross-site Scripting vulnerability (CVE-2026-1493) has been found in LEX Baza Dokumentów software.

Vulnerabilities in Ollama software

CERT Polska — Wed, 29 Apr 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-42248 and CVE-2026-42249) found in Ollama software.

Vulnerabilities in mpGabinet software

CERT Polska — Tue, 28 Apr 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-40550 to CVE-2026-40552) found in mpGabinet software.

Vulnerability in AdaptiveGRC software

CERT Polska — Fri, 24 Apr 2026 11:55:00 +0100

Cross-site Scripting vulnerability (CVE-2026-4313) has been found in AdaptiveGRC software.

Vulnerability in GNU sed software

CERT Polska — Mon, 20 Apr 2026 11:55:00 +0100

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability (CVE-2026-5958) has been found in GNU sed software.

Vulnerability in Fudo Enterprise software

CERT Polska — Mon, 20 Apr 2026 10:55:00 +0100

Incorrect Authorization vulnerability (CVE-2025-13480) has been found in Fudo Enterprise software.

Vulnerabilities in PAC4J software

CERT Polska — Fri, 17 Apr 2026 14:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-40458, CVE-2026-40459) found in PAC4J software.

Vulnerability in GREENmod software

CERT Polska — Fri, 17 Apr 2026 11:55:00 +0100

Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-5131) has been found in GREENmod software.

Vulnerability in MCPHub software

CERT Polska — Tue, 14 Apr 2026 11:55:00 +0100

Authorization bypass vulnerability (CVE-2025-13822) has been found in MCPHub project.

Vulnerabilities in Hydrosystem Control System software

CERT Polska — Thu, 09 Apr 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (CVE-2026-4901, CVE-2026-34184, CVE-2026-34185) found in Hydrosystem Control System software.

Annual report from the actions of CERT Polska 2025

CERT Polska — Wed, 08 Apr 2026 09:00:00 +0200

Another year of CERT Polska’s activities is behind us. It was a special one, as it marked the end of the third decade of our operations – we are celebrating our 30th anniversary! The year 2025 was a time full of challenges, growth, and a comprehensive approach to shaping cybersecurity – from proactive threat detection, through handling reports and responding to incidents, to sharing knowledge and building public awareness.

Vulnerabilities in Mlflow software

CERT Polska — Tue, 07 Apr 2026 13:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-33865, CVE-2026-33866) found in Mlflow software.

Vulnerability in Bludit software

CERT Polska — Tue, 07 Apr 2026 11:55:00 +0100

CERT Polska has received a report about a Stored Cross-site Scripting vulnerability found in Bludit software.

Analysis of cifrat: could this be an evolution of a mobile RAT?

Kacper Ratajczak — Fri, 03 Apr 2026 12:00:00 +0200

CERT Polska analyzed a Booking themed Android malware chain delivered through phishing and a fake update website. The sample is a multistage dropper that installs a hidden accessibility controlled RAT with WebSocket C2.

Vulnerabilities in Szafir software

CERT Polska — Thu, 02 Apr 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-26927, CVE-2026-26928) found in Szafir software.

Analysis of FvncBot campaign

Kacper Ratajczak — Mon, 30 Mar 2026 14:00:00 +0100

CERT Polska has analyzed an SGB-branded Android malware sample from the FvncBot campaign targeting Poland. The app installs a second-stage implant, coerces the victim into enabling accessibility, and registers the device to a backend that issues per-device credentials.

Vulnerability in Robolinho Update Software

CERT Polska — Mon, 30 Mar 2026 09:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2026-1612) has been found in Robolinho Update Software.

Vulnerabilities in Bludit software

CERT Polska — Fri, 27 Mar 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-25099 to CVE-2026-25101) found in Bludit software.

Vulnerability in KlinikaXP and KlinikaXP Insertino software

CERT Polska — Mon, 23 Mar 2026 11:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2026-1958) has been found in KlinikaXP and KlinikaXP Insertino software.

Vulnerability in Befree SDK software

CERT Polska — Wed, 18 Mar 2026 11:55:00 +0100

Cross-site Scripting vulnerability (CVE-2025-12518) has been found in Befree SDK software.

Vulnerabilities in Raytha software

CERT Polska — Mon, 16 Mar 2026 13:55:00 +0100

CERT Polska has received a report about 11 vulnerabilities (CVE-2025-15540 and from CVE-2025-69236 to CVE-2025-69243 and from CVE-2025-69245 to CVE-2025-69246) found in Raytha software.

Vulnerabilities in multiple tinycontrol devices

CERT Polska — Mon, 16 Mar 2026 11:55:00 +0100

CERT Polska has received reports about 2 vulnerabilities (CVE-2025-11500 and CVE-2025-15587) found in multiple tinycontrol devices (tcPDU and LAN Controllers: LK3.5, LK3.9 and LK4).

Vulnerability in Streamsoft Prestiż software

CERT Polska — Thu, 12 Mar 2026 11:55:00 +0100

Weak Token Encoding vulnerability (CVE-2026-0809) has been found in Streamsoft Prestiż software.

Vulnerability in Coppermine Photo Gallery software

CERT Polska — Wed, 11 Mar 2026 11:55:00 +0100

Path Traversal vulnerability (CVE-2026-3013) has been found in Coppermine Photo Gallery software.

Vulnerability in QuickCMS software

CERT Polska — Fri, 06 Mar 2026 11:55:00 +0100

Cross-Site Request Forgery (CSRF) vulnerability (CVE-2026-1468) has been found in QuickCMS software.

Vulnerabilities in DobryCMS software

CERT Polska — Mon, 02 Mar 2026 13:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-12462 and CVE-2025-14532) found in DobryCMS software.

Vulnerabilities in CGM CLININET and CGM NETRAAD software

CERT Polska — Mon, 02 Mar 2026 11:55:00 +0100

CERT Polska has received reports about 8 vulnerabilities found in CGM CLININET and CGM NETRAAD software.

Vulnerability in Pro3W CMS software

CERT Polska — Fri, 27 Feb 2026 13:55:00 +0100

SQL Injection vulnerability (CVE-2025-15498) has been found in Pro3W CMS software.

Vulnerabilities in PluXml CMS software

CERT Polska — Fri, 27 Feb 2026 11:55:00 +0100

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-24350 to CVE-2026-24352) found in PluXml CMS software.

Vulnerability in Omega-PSIR software

CERT Polska — Thu, 26 Feb 2026 12:55:00 +0100

Reflected XSS vulnerability (CVE-2026-1434) has been found in Omega-PSIR software.

Vulnerability in Simple.ERP software

CERT Polska — Thu, 26 Feb 2026 11:55:00 +0100

SQL Injection vulnerability (CVE-2026-1198) has been found in Simple.ERP software.

Vulnerability in multiple Finka applications

CERT Polska — Tue, 24 Feb 2026 15:55:00 +0100

Use of Hard-coded Credentials vulnerability (CVE-2025-13776) has been found in Finka-FK, Finka-KPR, Finka-Płace, Finka-Faktura, Finka-Magazyn, Finka-STW applications.

Vulnerability in multiple Slican devices

CERT Polska — Tue, 24 Feb 2026 12:55:00 +0100

Missing Authentication for Critical Function vulnerability (CVE-2025-14577) has been found in in multiple Slican devices.

ClickFix in action: how fake captcha can lead to a company-wide infection

Jarosław Jedynak — Tue, 17 Feb 2026 10:00:00 +0200

We assisted a large organisation in the investigation and remediation of a live malware infection caused by a successful Fake Captcha attack. In this report, we summarize our observations and publish an in-depth malware analysis.

Vulnerabilities in Quick.Cart software

CERT Polska — Thu, 05 Feb 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2026-23796 and CVE-2026-23797) found in Quick.Cart software.

Vulnerability in mObywatel application for iOS

CERT Polska — Tue, 03 Feb 2026 11:55:00 +0100

Exposure of Private Personal Information to an Unauthorized Actor vulnerability (CVE-2025-11598) has been found in mObywatel application for iOS.

Vulnerability in EAP Legislator software

CERT Polska — Mon, 02 Feb 2026 11:55:00 +0100

A vulnerability has been found in EAP Legislator software that allows a file archive to be extracted outside the target directory (CVE-2026-1186).

Energy Sector Incident Report - 29 December 2025

CERT Polska — Fri, 30 Jan 2026 11:00:00 +0100

CERT Polska presents a report on the analysis of an incident in the energy sector that occurred on 29 December 2025. The attacks were destructive in nature and targeted wind and photovoltaic farms, a large combined heat and power plant, and a company from the manufacturing sector. The publication aims to raise awareness of the risks associated with sabotage in cyberspace.

Vulnerabilities in firmware of Pix-Link LV-WR21Q routers

CERT Polska — Tue, 27 Jan 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-12386 and CVE-2025-12387) found in LV-WR21Q firmware.

TCC Bypass vulnerability in Inkscape application for MacOS

CERT Polska — Thu, 22 Jan 2026 13:55:00 +0100

TCC Bypass vulnerability (CVE-2025-15523) has been found in Inkscape application for MacOS.

Vulnerabilities in Quick.Cart software

CERT Polska — Thu, 22 Jan 2026 11:55:00 +0100

CERT Polska has received a report about 2 vulnerabilities (CVE-2025-67683 and CVE-2025-67684) found in Quick.Cart software.