CVE-2026-110474
2026-10-26
14h16 +00:00
14h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Use of Hard-coded Cryptographic Key The product uses a hard-coded, unchangeable cryptographic key. |
