Is CVE-2026-8244 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8244 being exploited in the wild.

How severe is CVE-2026-8244?

Medium severity, with a CVSS score of 5.3, published 10 May 2026.

Which products and versions are affected?

Industrial Application Software (IAS) Canias ERP 8.03.

Is there a fix for CVE-2026-8244?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8244 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-8244?

Check whether you run Industrial Application Software (IAS) Canias ERP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8244: IAS Canias ERP improper authentication in Login RMI Interface

CVE-2026-8244 · Severity: medium · CVSS 5.3 · Published 2026-05-10

A vulnerability exists in the login interface of Canias ERP, a software suite used for managing industrial and manufacturing business processes. By manipulating specific version parameters during the login process, an attacker can bypass standard authentication checks to obtain valid session identifiers. This allows an unauthorized user to gain a foothold in the system, which can be used to access sensitive business data or as a starting point for further attacks on the server.

Technologies: Industrial Application Software (IAS) Canias ERP. Vendors: Industrial Application Software (IAS).

Quick answers

Is CVE-2026-8244 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8244 being exploited in the wild.
How severe is CVE-2026-8244?: Medium severity, with a CVSS score of 5.3, published 10 May 2026.
Which products and versions are affected?: Industrial Application Software (IAS) Canias ERP 8.03.
Is there a fix for CVE-2026-8244?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8244 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-8244?: Check whether you run Industrial Application Software (IAS) Canias ERP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper authentication vulnerability (CWE-287) exists in the Login RMI Interface of IAS Canias ERP 8.03. The vulnerability is located in the handling of the 'clientVersion' argument within the RMI 'doAction' method. A remote, unauthenticated attacker can manipulate this argument to bypass authentication logic and disclose valid session IDs. These session IDs can subsequently be used to hijack active user or system sessions (such as CRONJOB sessions), facilitating further exploitation including remote code execution when chained with other vulnerabilities in the same product. As of the advisory date, the vendor has not provided a patch.

Affected products

Industrial Application Software (IAS) Canias ERP 8.03

Timeline

2025-04: other: Vulnerability research began
2026-05-09: disclosed: Public disclosure by security researcher
2026-05-10: advisory: CVE published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.