nisarga@ni5arga
General
CVE-2026-84147 CVE-2026-84148 CVE-2026-84149
Post summary
The content simply lists three CVE identifiers without any additional explanation or context.
191514287434.2K
28.7K followersView on X
CVE-2026-84147General
LOWCVSS 10.0 · CRITICALExploit discussion active in current signal (3 latest mentions)
Immediate actions
- Hunt for exploitation attempts and persistence artifacts
- Increase monitoring for publicly documented tradecraft
- Track advisory updates for patch or workaround availability
Recommended action window: High priority (within 72h)
NVD description
This vulnerability exists in the ERP system due to improper authentication controls and inadequate file type validation at the API endpoint. An unauthenticated remote attacker could exploit this vulnerability by uploading arbitrary files to a web accessible directory on the targeted system Successful exploitation of this vulnerability could allow the attacker to execute arbitrary code and compromise the targeted system.
1.5/ 10 priority
Sources & remediation
Weakness type (CWE)
CWE-434
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
Threat summary
- Public PoC is present in monitored signal
- 4 mentions across 2 observed days
- Momentum state: stable
What's happening
- PoC mentioned or linked in 1 signal
- Technical details provided in 2 signals
- General: 2 classified signals
- Disclosure: 1 classified signal
- Peaked at 3 mentions on most recent observed day (2026-09-03)
- 4 total mentions across 2 days
Deep dive
Activity timeline4 mentions / 2d
Signal classification3 categories
General250.0%
Disclosure125.0%
PoC125.0%
Referenced assets2 URLs
Classification over time
| Date | Total | Labels |
|---|
| 2026-09-01 | 1 | General1 |
| 2026-09-03 | 3 | Disclosure1General1PoC1 |
Full discourse4 posts
ExploitGrid@exploitgridGeneral🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-75604 - EXPLOIT CVE-2026-63137 - EXPLOIT CVE-2026-76657 CVE-2026-76658 CVE-2026-84147 ..🧵👇
Post summary
The post lists several CVEs and marks a few as EXPLOIT, but does not provide any supporting evidence or detailed information.
100015740 followersView on X
SecAlerts@SecAlertsCoDisclosure📁 CVE-2026-84147: Unauthenticated RCE in Manacle Technologies ERP via malicious file upload at the API endpoint. No auth needed, CVSS 10. If you run this ERP, treat it as compromised until patched. #cybersecurity #vulnerabilities #ciso https://secalerts.co/vulnerability/CVE-2026-84147?utm_campaign=x https://t.co/VFnpnoMJnA
Post summary
The tweet reveals CVE-2026-84147, a critical unauthenticated remote code execution flaw in Manacle Technologies ERP, urging users to treat affected systems as compromised until a patch is released.
00010119888 followersView on X- ExploitGrid@exploitgridPoC
[CVE] CVE-2026-84147 [HIGH PRIORITY] #Remote Code Execution Vulnerability in Manacle Technologies ERP System 🔗 https://exploitgrid.net/cve/CVE-2026-84147
Post summary
The post alerts about a remote code execution flaw in Manacle Technologies ERP and provides a link to a PoC on ExploitGrid, but offers no evidence of in-the-wild exploitation, patch details, or debunking.
100004940 followersView on X