CVE-2026-84149
This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.2
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
- EPSS probability
- 0.32%
- CWE
- CWE-527
- Published
- 2026-09-01
- Last modified
- 2026-09-01
Affected products
- Manacle Technologies Multi-tenant ERP System
Weakness type
Related vulnerabilities
- CVE-2022-20931 — Cisco Touch 10 Device Downgrade Attack Vulnerability
- CVE-2021-21423 — Exposure of Version-Control Repository to an Unauthorized Control Sphere in projen