CVE-2026-107103

{
  "etk_id": "ETK-2026-859",
  "cve_id": "CVE-2026-107103",
  "display_id": "CVE-2026-107103",
  "ghsa_id": "GHSA-v93j-gmfc-9m25",
  "euvd_id": "EUVD-2026-94218",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated SQL injection in Multi-tenant ERP System",
  "summary": "Manacle Technologies Multi-tenant ERP System contains an SQL injection flaw in an API endpoint. An unauthenticated remote attacker may be able to submit crafted input to the affected endpoint and execute SQL injection against the targeted system.",
  "mitigation": "Restrict unauthenticated access to ERP API endpoints until the vendor provides and applies a fix. Validate and parameterize database-bound API inputs; no fixed version is recorded.",
  "vendor": "Manacle Technologies",
  "product": "Multi-tenant ERP System",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "version"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Multi-tenant ERP System",
      "purl": null
    }
  ],
  "cwes": [
    89
  ],
  "cvss_score": 9.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N",
  "epss_score": 0.0033,
  "epss_percentile": 0.2419,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 71.70421515,
  "t0_at": "2026-10-07T08:21:22.512000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-07T10:15:26.316609+00:00",
      "days": 0.07921070149305555,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T08:21:22.512000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-07T08:21:22.512000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T08:21:22.512000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-107103"
    }
  }
}