Critical severity · published Oct 7, 2026
CVE-2026-107104
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
9.3
CVSS
0.4%
EPSS
No
On KEV
Description
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system.
Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code, manipulate application data or perform other unintended actions on the targeted system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Multi-tenant ERP System · Manacle Technologies
version · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107104
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107104
third-party-advisory
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430
More from Multi-tenant ERP System
10.0
CVE-2026-84147
Remote Code Execution Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107103
SQL Injection Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107102
Account Takeover Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84149
Information Disclosure Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84148
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System
