SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-68484

CRITICAL · CVSS 9 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-09 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The Cash Collect application has a critical vulnerability in the Sage AR Automation API that fails to properly verify user privileges, enabling low-privileged authenticated users to create administrator accounts and gain elevated access. This flaw poses a significant risk as it could lead to unauthorized control over sensitive administrative functions. Organizations using Cash Collect should prioritize immediate remediation to mitigate potential exploitation.

CVE
CVE-2026-68484
Severity
CRITICAL
CVSS
9
EPSS
0.17%

Original NVD Description

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges.