CVE-2026-110474
— UNSCOREDPublished 2026-10-26 · Updated 2026-10-26
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which could lead to make arbitrary API calls to retrieve call transcripts and recordings through the application API of the targeted system.
Weaknesses
CWE-321
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2014-125135PoC
- UNSCOREDCVE-2026-100413PoC
- LOWCVE-2026-102241PoC
- HIGHCVE-2026-103055PoC
- MEDIUMCVE-2026-103778
- HIGHCVE-2026-105035PoC
- HIGHCVE-2026-105392PoC
- MEDIUMCVE-2026-106172
Related by shared AI tags and CWE weakness class. Browse the full archive.