CVE Intelligence

Sage Sage AR Automation vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Sage Sage AR Automation: 2 record(s), with affected versions and fixes.

CVE-2026-68484 Critical · 9.0 CWE-862 Sep 9, 2026
Missing Authorization in Sage Sage AR Automation
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges.
CVE-2026-67403 Critical · 9.0 CWE-639 Sep 9, 2026
Authorization Bypass Through User-Controlled Key (IDOR) in Sage Sage AR Automation
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources belonging to other tenants by specifying a valid non predictable tenant identifier.