CyberSecBulletin

CreditNirvana vulnerabilities

We track 2 vulnerabilities in CreditNirvana products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.

2vulnerabilities
1critical
1high
0exploited
9.0average CVSS score

Latest CreditNirvana vulnerabilities

  • 9.3 Critical severity

    CreditNirvana Collections Platform…: Weak Authentication

    CVE-2026-110475CreditNirvana

    This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requ

  • 8.7 High severity

    Agentic AI Call Centre: Use of Hard-coded Cryptographic Key

    CVE-2026-110474CreditNirvana

    This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript fi