CVE-2026-84148CWE-639

CVE-2026-84148

published September 1, 2026

CVSS
9.2
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00683 · 51.9th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-09-01T17:20Z
References (1)
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430 · [email protected]
EPSS history
Timeline
  • 03 SEP 03:32Z
    EPSS moved — → 0%
    epss
  • 01 SEP 12:38Z
    Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System
    cvelistv5