Manacle Technologies ERP System: Unsafe deserialization of user data
Summary
The Multi-tenant ERP System from Manacle Technologies contains an unsafe deserialization flaw (CWE-502) in an affected functionality that processes user-controlled data. An unauthenticated remote attacker can exploit it by sending specially crafted data to the vulnerable functionality. Successful exploitation could allow arbitrary code execution, manipulation of application data or other unintended actions. The CVSS 4.0 base score is 9.3 (critical).
Affected
- Manacle Technologies Multi-tenant ERP System, affected version: Unknown.
- The CERT-In record states the default configuration is unaffected; the exact version range is not published.
Fixed in
Unknown.
- Contact Manacle Technologies for the patched version.
Workaround
Unknown.
- No vendor-issued workaround has been published.
Exploitation
- Exploited in the wild: no evidence found.
- Public proof-of-concept: none found.
- CISA SSVC: exploitation none, automatable yes, technical impact total.
Our recommendation
- Confirm whether the Manacle ERP System is in use and which versions are deployed.
- Check whether the ERP is reachable from the internet and, if so, treat it as urgent.
- Restrict access to the ERP and its API endpoints to trusted internal networks or VPNs.
- Request a patched version and a timeline from the vendor.
- Monitor logs for unusual API requests and re-check CERT-In CIVN-2026-0430 for updates.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- CERT-In CIVN-2026-0430 www.cert-in.org.in
- CERT-In vulnerability list 2026 www.cert-in.org.in
- Vulners NVD record vulners.com
- Vulners VulnRichment record vulners.com
- VulDB CVE-2026-107104 vuldb.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 03:05.
Original description (NVD)
This vulnerability exists in the ERP system due to unsafe deserialization of user controlled data in the affected functionality. An unauthenticated remote attacker could exploit this vulnerability by supplying specially crafted data to the vulnerable functionality of the targeted system. Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code, manipulate application data or perform other unintended actions on the targeted system.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.