CVE-2026-110474High· 8.7▾ TwilightThis vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading cl…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
agentic_ai_call_centre All versions prior to 2.0.0Upgrade CreditNirvana Agentic AI Call Centre to latest version 2.0.0
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-110475Critical· 9.3Improper Authentication Vulnerability in CreditNirvana Collections Platform
CVE-2026-71456High· 8.5Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.
CVE-2026-112345High· 8.1TTLock Android App < 9.8.260718 Hardcoded BLE Pairing Key Exposure
CVE-2026-89052Medium· 5.9Hardcoded AES encryption key in Archer C6
CVE-2026-76298High· 8.8Use of Hard-coded Cryptographic Key in the PostgreSQL Sidecar Service in Splunk Enterprise
CVE-2026-82891High· 8.1IBM Guardium Data Protection is affected by a security vulnerability