BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Krajowa Izba Rozliczeniowa

CVE-2026-106036: Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the re

CVE-2026-106036 Oct 29, 2026 Source: Vendor

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An attacker can provide an arbitrary SSL/TLS certificate and cause the application to download an update file from their server.



This issue was fixed in version 2.0 build 708.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-106036
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line
All 1 CVEs 1 Additional recognition 0 Unclaimed only
Showing 1–1 of 1 matching , clear filters
CVE-2026-106036 BR2026-0000-038187 unclaimed
Credited as Mikus Teivens, Critical Security