Sage Sage AR Automation

• CVE-2026-68484 Critical 9.0 Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Administrative functions do not properly verify user privileges, allowing authenticated low-privileged user 0.3%
• CVE-2026-67403 Critical 9.0 Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API. Insufficient tenant-level authorization checks allow authenticated users to access administrative resources 0.3%