CVE-2026-8241
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
In IAS Canias ERP 8.03, the iasGetServerInfoEvent function in the RMI Interface component allows remote manipulation leading to improper authorization. The exploit has been publicly disclosed.
Risk Assessment
An unauthorized remote attacker can gain access to administrative functions or data, compromising system security.
Recommendation
Immediately apply available mitigations (e.g., firewalls) and contact the vendor for a patch.
Other vulnerabilities in IAS Canias ERP
See all- CVE-2026-8244Medium
Vulnerability in IAS Canias ERP 8.03 in the Login RMI Interface component, where manipulation of the clientVersion argument leads to improper authentication. Remote attack possible, exploit publicly available.
- CVE-2026-8243Medium
A vulnerability was found in IAS Canias ERP 8.03 in the JNLP Deployment Endpoint component. An unknown function allows remote exploitation of a hard-coded cryptographic key. The vendor did not respond.
- CVE-2026-8217Medium
A security vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03 in the RMI interface. The Runtime.getRuntime.exec function allows OS command injection via the troiaCode argument. The attack can be performed remotely and the exploit has been made public.
- CVE-2026-8216High
A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03 affecting the function iasServerRemoteInterface.doAction of the Java RMI Session Management component. This manipulation leads to improper authentication. The attack can be launched remotely. The vendor was contacted early about this disclosure but did not respond.
- CVE-2026-8214Medium
Vulnerability in IAS Canias ERP 8.03 in the RMI Interface component, where manipulation of the sessionId argument in the doAction function leads to improper authentication. Remote attack possible, exploit publicly available.
Original NVD description (English source)
A vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03. The affected element is the function iasGetServerInfoEvent of the component RMI Interface. Such manipulation leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS