CVE-2026-8243 - Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key

Back Back to CVE browser

MEDIUM

Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key

Published May 10, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.48%

Description

A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key . The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

Vendor Industrial Application Software IAS Product Canias ERP Default
n/a
- Version
  8.03
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Industrial Application Software IAS

Canias ERP

n/a

Version	Status	Constraints
8.03	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-320

CWE-321

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28992
Advisory
https://hawktrace.com/blog/caniaserp
related
https://vuldb.com/submit/808296
third-party-advisory
https://vuldb.com/vuln/362459
vdb-entry
https://vuldb.com/vuln/362459/cti
signaturepermissions-required

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-28992		Advisory
https://hawktrace.com/blog/caniaserp		related
https://vuldb.com/submit/808296		third-party-advisory
https://vuldb.com/vuln/362459		vdb-entry
https://vuldb.com/vuln/362459/cti		signaturepermissions-required