{"id":"CVE-2026-110475","kind":"vulnerability","aliases":["CVE-2026-110475"],"related":[],"title":"CreditNirvana Collections Platform: login flaw lets attackers impersonate any user","description":"This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a valid authenticated session on the targeted system.\n\nSuccessful exploitation of this vulnerability could allow the attacker to enumerate platform users, establish sessions as arbitrary users including administrative users, access and modify sensitive information with the privileges of the impersonated user.","summary":"The CreditNirvana Collections Platform has broken authentication and authorization at its login service, so unauthenticated requests can reach APIs without a valid session. An attacker can enumerate users, start sessions as arbitrary users including administrators, and read or change sensitive data.","severity":"critical","cvss":9.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["collections-platform","creditnirvana","other"],"not_affected_if":[],"how_to_check":"- Confirm whether the CreditNirvana Collections Platform is deployed in your environment and which version is running (unknown from sources)\n- Review login service and API access logs for unauthenticated requests or sessions issued to unexpected accounts (unknown from sources)","fix":"- Unknown: the sources do not name a fixed version or vendor patch; check with the vendor or NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-110475","status":"open","published_at":"2026-10-26T14:16:26+00:00","first_seen_at":"2026-10-26T14:30:36+00:00","triaged_at":"2026-10-26T14:32:03+00:00","updated_at":"2026-10-26T14:32:03+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-26T14:32:03Z","model":"claude-haiku-5-5","output":{"fix":"- Unknown: the sources do not name a fixed version or vendor patch; check with the vendor or NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-110475","reach":"internet","title":"CreditNirvana Collections Platform: login flaw lets attackers impersonate any user","impact":"high","summary":"The CreditNirvana Collections Platform has broken authentication and authorization at its login service, so unauthenticated requests can reach APIs without a valid session. An attacker can enumerate users, start sessions as arbitrary users including administrators, and read or change sensitive data.","category":"other","nicknames":[],"who_cares":["creditnirvana","collections-platform"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker impersonates administrators and reads or modifies sensitive collections data","analyst_note":"Confirm affected versions, vendor fix and exposure details at the NVD entry https://nvd.nist.gov/vuln/detail/CVE-2026-110475 and the vendor's advisory.","how_to_check":"- Confirm whether the CreditNirvana Collections Platform is deployed in your environment and which version is running (unknown from sources)\n- Review login service and API access logs for unauthenticated requests or sessions issued to unexpected accounts (unknown from sources)","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run the CreditNirvana Collections Platform with its login service exposed to the network are affected, since the flaw lets unauthenticated remote requests reach APIs. The sources do not describe other conditions, so whether teams without this product can skip it is unknown.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.000643,"input_tokens":3384,"output_tokens":610,"severity_before":"critical"},"analyst_status":null,"analyst_note":null,"search":"'-110475':13A,16A '-2026':12A,15A 'access':95C,127C 'administr':55B,125C 'allow':112C 'api':39B,96C 'arbitrari':52B,122C 'attack':7A,45B,85C,114C 'authent':27B,73C,92C,100C 'author':29B,75C 'broken':26B 'chang':59B 'collect':2A,18B,23B,68C 'collections-platform':17B 'control':76C 'could':86C,111C 'creditnirvana':1A,20B,22B,67C 'cve':11A,14A 'data':61B 'due':70C 'enumer':47B,116C 'establish':119C 'exist':64C 'exploit':87C,107C 'flaw':5A 'imperson':8A,137C 'improp':72C 'includ':54B,124C 'inform':131C 'let':6A 'login':4A,32B,80C 'manipul':91C 'modifi':129C 'platform':3A,19B,24B,69C,79C,117C 'privileg':134C 'reach':38B 'read':57B 'remot':84C 'request':36B,93C 'sensit':60B,130C 'servic':33B,81C 'session':43B,50B,101C,120C 'start':49B 'success':106C 'system':105C 'target':104C 'unauthent':35B,83C 'user':10A,48B,53B,118C,123C,126C,138C 'valid':42B,99C 'vulner':63C,89C,110C 'without':40B,97C","nicknames":[],"mitigations":[],"who_affected":"Teams that run the CreditNirvana Collections Platform with its login service exposed to the network are affected, since the flaw lets unauthenticated remote requests reach APIs. The sources do not describe other conditions, so whether teams without this product can skip it is unknown.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-26T14:16:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"vdisclose@cert-in.org.in","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-110475","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110475","severity":null,"published_at":"2026-10-26T14:16:26+00:00","modified_at":"2026-10-26T14:21:33+00:00","first_seen_at":"2026-10-26T14:30:36+00:00","fetched_at":"2026-10-26T14:30:36+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}