CVE-2026-8214
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Vulnerability in IAS Canias ERP 8.03 in the RMI Interface component, where manipulation of the sessionId argument in the doAction function leads to improper authentication. Remote attack possible, exploit publicly available.
Risk Assessment
An attacker can impersonate another user and perform unauthorized operations in the ERP system, potentially compromising data integrity.
Recommendation
Contact the vendor for a patch or apply temporary network security measures.
Original NVD description (English source)
A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipulation of the argument sessionId results in improper authentication. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.