VULNERABILITY INTELLIGENCE

CVE-2026-84149

CVSS score9.2 CRITICAL

EPSS probability0.54%

CISA KEVNot currently listed

Published2026-09-01

Last modified2026-09-01

Description

This vulnerability exists in the ERP system due to exposure of repository information through a publicly accessible .git directory. An unauthenticated remote attacker could exploit this vulnerability by accessing the exposed .git directory and retrieving repository metadata and associated files, which could allow reconstruction of the application's source code.