Critical severity · published Sep 1, 2026
CVE-2026-84149
Information Disclosure Vulnerability in Manacle Technologies ERP System
9.2
CVSS
0.5%
EPSS
No
On KEV
Description
This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 46% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ME
Multi-tenant ERP System · Manacle Technologies
version · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-84149
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-84149
www.cert-in.org.in
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430
More from Multi-tenant ERP System
10.0
CVE-2026-84147
Remote Code Execution Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107104
Unsafe Deserialization Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107103
SQL Injection Vulnerability in Manacle Technologies ERP System
9.3
CVE-2026-107102
Account Takeover Vulnerability in Manacle Technologies ERP System
9.2
CVE-2026-84148
Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System