CVE-2026-0809

Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.

Score

CVSS 4.0 6.3 Medium

Status

Deferred - cvd@cert.pl

Published

2026-03-12

Last modified

2026-03-12

Weaknesses

CWE-261

Affected products

• Streamsoft Presti (Streamsoft)

References

• https://cert.pl/posts/2026/03/CVE-2026-0809
• https://www.streamsoft.pl/streamsoft-prestiz/