CreditNirvana

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

CreditNirvana records in CISA KEV

No CreditNirvana vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-80363 CVE-2026-110475 · GHSA-84f2-894g-2279

Improper Authentication in CreditNirvana Collections Platform

MEDIUM 49

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00484 Published 2026-10-26 Fixed in 4.8.2 CWE-1390

TI-2026-80362 CVE-2026-110474 · GHSA-72fh-w73q-9x49

Hardcoded API key in CreditNirvana Agentic AI Call Centre exposes recordings

MEDIUM 44

This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00371 Published 2026-10-26 Fixed in 2.0.0 CWE-321

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0