CVE-2026-8217
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk65th percentile - higher than 65% of all known CVEs
Summary
A security vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03 in the RMI interface. The Runtime.getRuntime.exec function allows OS command injection via the troiaCode argument. The attack can be performed remotely and the exploit has been made public.
Risk Assessment
The organization is at risk of remote code execution on the ERP server, potentially leading to data theft, service disruption, or lateral movement within the internal network.
Recommendation
Immediately disable or secure the RMI interface in IAS Canias ERP 8.03 and apply temporary firewall rules to block unauthorized access to this component until an official patch is released.
Original NVD description (English source)
A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.