CVE-2026-8242

LOW EPSS 20.6%

Published May 10, 20261mo ago · Modified Jun 17, 20261w ago

2.9 CVSS 4.0

Low

Published May 10, 2026 1mo ago

Last Modified Jun 17, 2026 1w ago

Description

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing a manipulation results in observable response discrepancy. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Details

Base Score

2.9

Exploitability

—

Impact

—

Vector string

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope X

Threat Intelligence

EPSS Exploit Probability

20.6% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 2

CWE-203

CWE-204

References 5

gist.github.com https://gist.github.com/0xb1lal/85422a63c10a001c75a22365457de624
hawktrace.com https://hawktrace.com/blog/caniaserp
vuldb.com https://vuldb.com/submit/808295
vuldb.com https://vuldb.com/vuln/362458
vuldb.com https://vuldb.com/vuln/362458/cti

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.