Vulnerability · Published Sep 1, 2026 · Assigned by CERT-In

CVE-2026-84147Remote Code Execution Vulnerability in Manacle Technologies ERP System

Critical 10.0

In plain English

A critical-severity unrestricted file upload in Multi-tenant ERP System from Manacle Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).

Severity (CVSS 4.0)10.0Critical

Exploit odds (30 days)1.0%top 38.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code and compromise the targeted system.

Affected products (as reported)

Vendor	Product	Versions
Manacle Technologies	Multi-tenant ERP System	version

Weakness: CWE-434 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430 third-party-advisory