CVE-2026-8242CWE-203CWE-204

Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy

Medium · published May 10, 2026

CVSS v4.0
6.3
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. The impacted element is the function doAction of the component Login RMI Interface. Performing a manipulation results in observable response discrepancy. The attack is possible to be carried out remotely. A high degree of complexity is needed for the attack. The exploitability is regarded as difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
6.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00443 · 37.5th percentile
Weaknesses
CWE-203 · Observable Discrepancy; CWE-204 · Observable Response Discrepancy
Published
2026-05-10T08:15Z
EPSS history
Timeline
  • 10 MAY 08:15Z
    Industrial Application Software IAS Canias ERP Login RMI doAction response discrepancy
    cvelistv5