PT-2026-39428 · Industrial Application · Canias Erp

B1Lal + 1 · Published 2026-05-10 · Updated 2026-06-17 · CVE-2026-8215

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Industrial Application Software IAS Canias ERP version 8.03

Description A path traversal issue exists in the RMI Interface component. A remote attacker can exploit this by manipulating the m strSourceFileName argument within the iasRequestFileEvent() function. Path traversal is a technique that allows an attacker to access files and directories that are stored outside the intended folder by using special character sequences.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the RMI Interface component or the iasRequestFileEvent() function to minimize the risk of exploitation.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-8215

Affected Products

Canias Erp

References · 9

• 🔥 https://gist.github.com/0xb1lal/3885c69998516685e3ea833403b9db2b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8215 · Security Note
• https://t.me/CVEtracker/53258 · Telegram Post
• https://vuldb.com/submit/808242 · Note
• https://vuldb.com/vuln/362432/cti · Note
• https://twitter.com/lyrie_ai/status/2067136726129070467 · Twitter Post
• https://vuldb.com/vuln/362432 · Note
• https://hawktrace.com/blog/caniaserp · Note
• https://t.me/cveNotify/162898 · Telegram Post