CVE-2026-84149— Information Disclosure Vulnerability in Manacle Technologies ERP System
Quick assessment
Affected
Manacle Technologies Multi-tenant ERP System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
该漏洞存在于 ERP 系统中，原因是 目录对外公开可访问，导致仓库信息暴露。未认证的远程攻击者可以利用此漏洞，通过访问暴露的 目录，获取仓库元数据及相关文件，从而可能重构出应用的源代码。
Possible ATT&CK Techniques 1 AI
T1212.001Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Manacle Technologies | Multi-tenant ERP System | version |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84149
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information Disclosure Vulnerability in Manacle Technologies ERP System
Source: CVE Program / CVE List V5
Vulnerability Description
This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
将CVS仓库暴露给非授权控制范围
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Manacle Technologies | Multi-tenant ERP System | version | - |
|
II. Public POCs for CVE-2026-84149
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84149
请登录查看更多情报信息。
Other References for CVE-2026-84149 (1)
-
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430 third-party-advisory
Same Patch Batch · Manacle Technologies · 2026-09-01 · 3 CVEs total
| CVE-2026-84147 | 10.0 CRITICAL | Remote Code Execution Vulnerability in Manacle Technologies ERP System |
| CVE-2026-84148 | 9.2 CRITICAL | Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System |
IV. Related Vulnerabilities
V. Comments for CVE-2026-84149
No comments yet