← CVE Intelligence

CVE-2026-68484

Sage / Sage AR Automation PUBLISHED

Description (CNA)

Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged users to create administrator accounts and obtain elevated privileges.

Affected (CNA)

Vendor / productVersions
Sage / Sage AR Automationaffected June-R1-2026 before June-R1-2026

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.