CVE-2026-110475

The record

This vulnerability exists in the CreditNirvana Collections Platform due to improper authentication and authorization controls at the platform login service. An unauthenticated remote attacker could exploit this vulnerability by manipulating authentication requests and accessing APIs without a valid authenticated session on the targeted system. Successful exploitation of this vulnerability could allow the attacker to enumerate platform users, establish sessions as arbitrary users including administrative users, access and modify sensitive information with the privileges of the impersonated user.

Affected packages

Related vulnerabilities

• CVE-2026-115967 Weak Authentication vulnerability in Hamid Alinia Login with phone number… CWE-1390
• CVE-2025-30414 Local privilege escalation due to improper authentication. CWE-1390
• CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
• CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
• CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
• CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
• CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
• CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390