---
id: CVE-2026-110475
title: Improper Authentication Vulnerability in CreditNirvana Collections Platform
summary: >-
  This vulnerability exists in the CreditNirvana Collections Platform due to
  improper authentication and authorization controls at the platform login
  service. An unauthenticated remote attacker could exploit this vulnerability
  by manipulat…
severity: critical
cvss: 9.3
cvssVector: 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N'
cvssSource: cna
cwe:
  - CWE-1390
vendor: CreditNirvana
product: CreditNirvana Collections Platform (CollectionWorkz)
affected:
  - collections_platform_collectionworkz All versions prior to 4.8.2
published: '2026-10-26'
updated: '2026-10-26'
sourceUpdated: '2026-10-26T12:20:36.675Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-110475'
references:
  - url: >-
      https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0523
tags:
  - cve.org
ingestedAt: '2026-10-26T14:27:31.841Z'
---

## Overview

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a valid authenticated session on the targeted system.

Successful exploitation of this vulnerability could allow the attacker to enumerate platform users, establish sessions as arbitrary users including administrative users, access and modify sensitive information with the privileges of the impersonated user.

## Affected

- `collections_platform_collectionworkz All versions prior to 4.8.2`

## Remediation

Upgrade CreditNirvana Collections Platform to latest version 4.8.2