CVE-2026-8242
Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
8th
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing a manipulation results in observable response discrepancy. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
| CWE | CWE-204 CWE-203 |
| Vendor | industrial application software ias |
| Product | canias erp |
| Published | May 10, 2026 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for industrial application software ias canias erp
Be the first to know when new low vulnerabilities affecting industrial application software ias canias erp are published β delivered to Slack, Telegram or Discord.
Get Free Alerts β
Free Β· No credit card Β· 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Industrial Application Software IAS / Canias ERP
8.03
References
Credits
Bilal GΓΌneΕ (HawkTrace) π b1lal (VulDB User) b1lal (VulDB User) VulDB CNA Team