CVE-2026-8215
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
Path traversal vulnerability in the RMI interface of Canias ERP 8.03. Manipulation of the m_strSourceFileName argument in the iasRequestFileEvent function allows remote attack.
Risk Assessment
An attacker can remotely read arbitrary files on the server, potentially leading to leakage of sensitive data.
Recommendation
Contact the vendor for a patch; temporarily restrict access to the RMI interface.
Original NVD description (English source)
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This vulnerability affects the function iasRequestFileEvent of the component RMI Interface. This manipulation of the argument m_strSourceFileName causes path traversal. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.