CRITICAL 9.0 NVD

CVE-2026-68484

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, al

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges.

References

https://helpcenter.sara.sage.com/hc/en-us/articles/52106283946651-June-R2-Release-2026

Published: 2026-09-09 · Source: NVD · Feed updated: 2026-09-11

This critical severity vulnerability with a CVSS score of 9.0 was published on 2026-09-09 via NVD.

Risk Timeline

CVE Disclosed2026-09-09 · 1 day ago

Remediation Resources

Official Advisory

helpcenter.sara.sage.com/hc/en-us/articles/52106283946651-June-R2-Rele

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.