by Kastro
Paper/Archive/CVE-2026-84149

CVE-2026-84149

Manacle Technologies Multi-tenant ERP System — Information Disclosure Vulnerability in Manacle Technologies ERP System

EPSS 0.5%CVSS 9.2
critical.is priorityof 100
37
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 45.7.457 × 209.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.

Affected

ProductAffectedFixed inSource
Multi-tenant ERP Systemversion–CNA

Scores by source

CERT-In (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

writeupcert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430