Vulnerability · Published Sep 1, 2026 · Assigned by CERT-In

CVE-2026-84149Information Disclosure Vulnerability in Manacle Technologies ERP System

Critical 9.2

In plain English

A critical-severity security flaw in Multi-tenant ERP System from Manacle Technologies. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 4.0)9.2Critical

Exploit odds (30 days)0.5%top 54.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.

Affected products (as reported)

Vendor	Product	Versions
Manacle Technologies	Multi-tenant ERP System	version

Weakness: CWE-527 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430 third-party-advisory