{"id":"CVE-2026-8217","state":"PUBLISHED","title":"Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection","description":"A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2026-05-10T01:15:09.643Z","updatedAt":"2026-05-11T15:07:47.116Z","severity":{"score":5.3,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","source":"VulDB"},"assigner":"VulDB","products":["Industrial Application Software IAS Canias ERP"],"affected":[{"vendor":"Industrial Application Software IAS","product":"Canias ERP","versions":[{"version":"8.03","status":"affected"}],"modules":["RMI Interface"]}],"references":["https://vuldb.com/vuln/362434","https://vuldb.com/vuln/362434/cti","https://vuldb.com/submit/808262","https://hawktrace.com/blog/caniaserp","https://gist.github.com/0xb1lal/6ccc2356e7e0a26f7b8a6bd6f0d84bbb","https://hawktrace.com/blog/caniaserp/"],"weaknesses":["CWE-78","CWE-77"],"ingestedAt":"2026-10-29T20:13:26.108Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/8xxx/CVE-2026-8217.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-8217","state":"PUBLISHED","datePublished":"2026-05-10T01:15:09.643Z","dateUpdated":"2026-05-11T15:07:47.116Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-05-09T07:19:40.377Z"},"containers":{"cna":{"title":"Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection","descriptions":[{"lang":"en","value":"A security flaw has been discovered in Industrial Application Software IAS Canias ERP 8.03. Impacted is the function Runtime.getRuntime.exec of the component RMI Interface. Performing a manipulation of the argument troiaCode results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way."}],"affected":[{"vendor":"Industrial Application Software IAS","product":"Canias ERP","versions":[{"version":"8.03","status":"affected"}],"modules":["RMI Interface"]}],"references":[{"url":"https://vuldb.com/vuln/362434","name":"VDB-362434 | Industrial Application Software IAS Canias ERP RMI Runtime.getRuntime.exec os command injection","tags":["vdb-entry","technical-description"]},{"url":"https://vuldb.com/vuln/362434/cti","name":"VDB-362434 | CTI Indicators (IOB, IOC, TTP, IOA)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/submit/808262","name":"Submit #808262 | Industrial Application Software - IAS Canias ERP 8.03-- Code Injection - Remote Code Execution - (CWE-94/CWE-78)","tags":["third-party-advisory"]},{"url":"https://hawktrace.com/blog/caniaserp","tags":["related"]},{"url":"https://gist.github.com/0xb1lal/6ccc2356e7e0a26f7b8a6bd6f0d84bbb","tags":["broken-link","exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":5.3,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":6.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":6.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":6.5,"vectorString":"AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-78","type":"CWE","lang":"en","description":"OS Command Injection"}]},{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"Command Injection"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-05-11T13:09:56.521Z"},"timeline":[{"time":"2026-05-09T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-05-09T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-05-11T15:10:43.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"Bilal Güneş (HawkTrace)","type":"finder"},{"lang":"en","value":"b1lal (VulDB User)","type":"reporter"},{"lang":"en","value":"b1lal (VulDB User)","type":"analyst"},{"lang":"en","value":"VulDB CNA Team","type":"coordinator"}]},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://hawktrace.com/blog/caniaserp/","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-11T15:07:26.363336Z","id":"CVE-2026-8217","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-11T15:07:47.116Z"}}]}}}