← CVE Intelligence

CVE-2026-0809

Weak KSeF token encoding in Streamsoft Prestiż PUBLISHED

Description (CNA)

Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.

Affected (CNA)

Vendor / productVersions
Streamsoft / Streamsoft Prestiżaffected 12.2.363.17 before 20.0.380.92

CWE

CWE-261

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.