CRITICAL 9.2 NVD

CVE-2026-84149

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote at

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026-0430

Published: 2026-09-01 · Source: NVD · Feed updated: 2026-09-01

This critical severity vulnerability with a CVSS score of 9.2 was published on 2026-09-01 via NVD.

Risk Timeline

CVE Disclosed2026-09-01 · -1 days ago

Remediation Resources

Analysis & PoC

www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2026

vulnfeed aggregates 11474 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.