CVE-2026-110474 Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application

This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which cou...

CVE-2026-110474 Hardcoded API Key Vulnerability in CreditNirvana Agentic AI Call Centre application

This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which cou...

EUVD-2026-109786

This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which cou...

CVE-2026-110474

The CreditNirvana Agentic AI Call Centre application is vulnerable to a security flaw caused by a hardcoded static API Key within the client-side JavaScript bundle. An unauthenticated remote attacker can exploit this by downloading the JavaScript files to extract the key. Once obtained, the attac...

PT-2026-123297

This vulnerability exists in the CreditNirvana Agentic AI Call Centre application due to hardcoded static API Key in the client side JavaScript bundle. An unauthenticated remote attacker could exploit this vulnerability by downloading client side JavaScript files and extracting API key, which cou...

CVE-2025-64308: Unprotected Transport of Credentials

The Brightpick Mission Control web application exposes hardcoded credentials in its client-side JavaScript bundle to Brightpick AI's documentation portal...