Deserialization in Manacle Technologies Multi-Tenant Erp System
CVE-2026-107104
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code, manipulate application data or perform other unintended actions on the targeted system.
Vulnerability class: Insecure Deserialization
Published · last modified .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
- Manacle Technologies Multi-Tenant Erp System — versions version
Weakness classification (CWE)
References
- www.cert-in.org.in/s2cMainServlet (third-party-advisory)