CVE-2026-8242
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
A vulnerability was found in Canias ERP 8.03 in the doAction function of the Login RMI Interface component. Manipulation results in observable response discrepancy, allowing remote attack with high complexity. The exploit has been made public.
Risk Assessment
A remote attacker can exploit response discrepancies for enumeration or information leakage, potentially compromising the confidentiality of the ERP system.
Recommendation
Contact the vendor for a patch and implement additional monitoring and access restrictions for the RMI interface.
Original NVD description (English source)
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing a manipulation results in observable response discrepancy. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.