CVE-2026-8244
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
Vulnerability in IAS Canias ERP 8.03 in the Login RMI Interface component, where manipulation of the clientVersion argument leads to improper authentication. Remote attack possible, exploit publicly available.
Risk Assessment
An attacker can bypass authentication and gain unauthorized access to the ERP system, potentially leading to data theft or disruption.
Recommendation
Contact the vendor for a patch or apply temporary network security measures.
Original NVD description (English source)
A vulnerability was identified in Industrial Application Software IAS Canias ERP 8.03. This impacts an unknown function of the component Login RMI Interface. The manipulation of the argument clientVersion leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.