by Kastro
Paper/Archive/CVE-2026-107104

CVE-2026-107104

Manacle Technologies Multi-tenant ERP System — Unsafe Deserialization Vulnerability in Manacle Technologies ERP System

EPSS 0.4%CVSS 9.3
critical.is priorityof 100
35
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 36.5.365 × 207.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code, manipulate application data or perform other unintended actions on the targeted system.

Affected

ProductAffectedFixed inSource
Multi-tenant ERP Systemversion–CNA

Scores by source

CERT-In (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

writeupcert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430