Critical severity · published Oct 7, 2026
CVE-2026-107103
SQL Injection Vulnerability in Manacle Technologies ERP System
9.3
CVSS
0.3%
EPSS
No
On KEV
Description
This vulnerability exists in the ERP system due to insufficient validation and parameterization of user supplied input in an API endpoint. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted input to the vulnerable endpoint.
Successful exploitation of this vulnerability could allow the attacker to perform SQL injection attacks on the targeted system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Multi-tenant ERP System · Manacle Technologies
version · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107103
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107103
third-party-advisory
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430
More from Multi-tenant ERP System
10.0
CVE-2026-84147
Remote Code Execution Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107104
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107102
Account Takeover Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84149
Information Disclosure Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84148
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System