CVE-2026-0809

MEDIUM

Weak KSeF token encoding in Streamsoft Prestiż

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-0809 has a selected CVSS score of 6.3 (medium).

Description

Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with know values are encoded. This issue was fixed in version 20.0.380.92.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 12, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Streamsoft Prestiż

Browse Streamsoft / Streamsoft Prestiż

Default status: unaffected

CVE List12.2.363.17 to < 20.0.380.92affected

References

3