CVE-2026-110474
2026-10-26
14h16 +00:00
14h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Use of Hard-coded Cryptographic Key The product uses a hard-coded, unchangeable cryptographic key. |
