CRITICAL 9.2 NVD

CVE-2026-84148

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker co

This vulnerability exists in the ERP system due to improper authentication and authorization controls in the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by manipulating parameter which could lead to exposure of sensitive information belonging to other users on the targeted system.

References

Published: 2026-09-01 · Source: NVD · Feed updated: 2026-09-01
This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-09-01 via NVD.

Risk Timeline

CVE Disclosed2026-09-01 · -1 days ago

Remediation Resources

Analysis & PoC
www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026
vulnfeed aggregates 11474 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.