CVE-2026-107102: Multi-tenant ERP System version

Affected technology

Multi-tenant ERP System · version
Manacle Technologies

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could exploit this vulnerability by manipulating the parameter to cause the application to establish an authenticated session for an arbitrary user without valid payment verification. Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality and integrity impact as high; availability impact as none.