CVE-2026-107102
Account Takeover Vulnerability in Manacle Technologies ERP System
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
This vulnerability exists in the ERP system due to improper validation of payment callback parameters and inadequate authentication controls in API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an authenticated session for an arbitrary user without valid payment verification. Successful exploitation of this vulnerability could allow the attacker to bypass authentication and gain unauthorized access to other user accounts on the targeted system.
| CWE | CWE-345 |
| Vendor | manacle technologies |
| Product | multi-tenant erp system |
| Published | Oct 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for manacle technologies multi-tenant erp system
Be the first to know when new unknown vulnerabilities affecting manacle technologies multi-tenant erp system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Manacle Technologies / Multi-tenant ERP System
version
References
Credits
This vulnerability is reported by Nisarga Adhikary.