Sage AR Automation vulnerabilities

2 known vulnerabilities in Sage AR Automation from Sage. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Sage AR Automation: Missing Authorization

  CVE-2026-68484Sep 9, 2026Sage

  Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privi

• 9.0 Critical severity

  Sage AR Automation: Authorization Bypass Through User-Controlled Key

  CVE-2026-67403Sep 9, 2026Sage

  Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predic