πŸ” CVE Alert

CVE-2026-8241

MEDIUM 5.3

Industrial Application Software IAS Canias ERP RMI iasGetServerInfoEvent improper authorization

CVSS Score
5.3
EPSS Score
0.0%
EPSS Percentile
9th

A vulnerability has been found in Industrial Application Software IAS Canias ERP 8.03. The affected element is the function iasGetServerInfoEvent of the component RMI Interface. Such manipulation leads to improper authorization. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CWE CWE-285 CWE-266
Vendor industrial application software ias
Product canias erp
Published May 10, 2026
Last Updated May 11, 2026
Stay Ahead of the Next One

Get instant alerts for industrial application software ias canias erp

Be the first to know when new medium vulnerabilities affecting industrial application software ias canias erp are published β€” delivered to Slack, Telegram or Discord.

Get Free Alerts β†’ Free Β· No credit card Β· 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

Industrial Application Software IAS / Canias ERP
8.03

References

NVD β†— CVE.org β†— EPSS Data β†—
vuldb.com: https://vuldb.com/vuln/362457 vuldb.com: https://vuldb.com/vuln/362457/cti vuldb.com: https://vuldb.com/submit/808270 hawktrace.com: https://hawktrace.com/blog/caniaserp gist.github.com: https://gist.github.com/0xb1lal/6f3f050f08cff569ecbde586e63c6bea

Credits

Bilal GΓΌneş (HawkTrace) πŸ” b1lal (VulDB User) b1lal (VulDB User) VulDB CNA Team