CVE-2026-8214

A vulnerability was found in Industrial Application Software IAS Canias ERP 8.03. This affects the function doAction of the component RMI Interface. The manipulation of the argument sessionId results in improper authentication. It is possible to launch the attack remotely. The exploit has been ma...

CVE-2021-30116

Kaseya VSA on-premises prior to 9.5.7 is affected by CVE-2021-30116. An unauthenticated download page (dl.asp) exposes KaseyaD.ini, which contains Agent_Guid and AgentPassword. An attacker can use these credentials to log in to the download page and obtain a sessionId cookie, bypassing authentica...