Critical severity · published Sep 1, 2026
CVE-2026-84148
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System
9.2
CVSS
0.7%
EPSS
No
On KEV
Description
This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Multi-tenant ERP System · Manacle Technologies
version · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-84148
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-84148
www.cert-in.org.in
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430
More from Multi-tenant ERP System
10.0
CVE-2026-84147
Remote Code Execution Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107104
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107103
SQL Injection Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107102
Account Takeover Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84149
Information Disclosure Vulnerability in Manacle Technologies ERP System