<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 29 Sep 2026 06:21:39 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-84148 — Insecure Direct Object Reference Vulnerability in Manacle Technologies ERP System</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-84148</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Manacle Technologies Multi-tenant ERP System&lt;/p&gt;
&lt;p&gt;This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Manacle Technologies Multi-tenant ERP System&lt;/p&gt;
&lt;p&gt;This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-84148</guid>
    </item>
  </channel>
</rss>
