Vulnerability · Published May 10, 2026 · Assigned by VulDB
CVE-2026-8243Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key
Medium 5.3
In plain English
A medium-severity security flaw in Canias ERP from Industrial Application Software IAS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).
Official description
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Industrial Application Software IAS | Canias ERP | 8.03 |
Weakness: CWE-321, CWE-320 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:X
References
- VDB-362459 | Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key vdb-entry
- VDB-362459 | CTI Indicators (IOB, IOC, TTP) signature, permissions-required
- Submit #808296 | Industrial Application Software - IAS Canias ERP 8.03-- Use of Hard-coded Cryptographic Key (CWE-321) third-party-advisory
- https://hawktrace.com/blog/caniaserp related