Dfir-iris Iris vulnerabilities

• dfir-iris iris-web IRIS through 2.4.29 Unauthorized Comment Access via Object ID CVE-2026-92605 7.1 HighSeptember 16, 2026
• dfir-iris iris-web DFIR-IRIS Insufficient Logout Implementation CVE-2026-16970 4.2 MediumJuly 30, 2026
• dfir-iris iris-web DFIR-IRIS Missing Brute Force Protection in User Authentication CVE-2026-18362 5.9 MediumJuly 30, 2026
• dfir-iris iris-web DFIR-IRIS Missing Brute Force Protection in OTP Validation CVE-2026-16971 5.9 MediumJuly 30, 2026
• dfir-iris iris-web DFIR-IRIS Stored XSS in Datastore Upload CVE-2026-18361 7.6 HighJuly 30, 2026
• dfir-iris iris-web DFIR-IRIS Stored XSS in Custom Attributes CVE-2026-18360 7.6 HighJuly 30, 2026
• dfir-iris iris-web DFIR-IRIS Stored XSS in Assets CVE-2026-16969 7.6 HighJuly 30, 2026
• dfir-iris iris-web IRIS Alerts Can be Falsely Attributed to Customers CVE-2026-42547 5.4 MediumJune 4, 2026
• dfir-iris iris-web IRIS has a Cross-Site Request Forgery (CSRF) issue CVE-2026-42543 4.3 MediumJune 4, 2026
• dfir-iris iris-web IRIS has a Mass Assignment issue CVE-2026-42540 4.3 MediumJune 4, 2026
• dfir-iris iris-web IRIS has an Excessive Data Exposure issue CVE-2026-42539 6.5 MediumJune 4, 2026
• dfir-iris iris-web IRIS has an Insecure File Upload CVE-2026-42538 6.3 MediumJune 4, 2026
• dfir-iris iris-web Iris has an Open Redirect issue CVE-2026-42329 4.7 MediumJune 4, 2026
• dfir-iris iris-web Iris has an Improper Authorization issue CVE-2026-41522 7.1 HighJune 4, 2026
• dfir-iris iris, iris-web +1 more Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management CVE-2026-22783 9.6 CriticalJanuary 12, 2026
• dfir-iris iris-evtx-module Arbitrary File Write in IRIS EVTX Pipeline CVE-2024-34060 8.8 HighMay 23, 2024
• dfir-iris iris, iris-web +1 more iris-web vulnerable to Server Side Template Injection in reports CVE-2024-25624 6.8 MediumApril 25, 2024
• dfir-iris iris, iris-web +1 more Improper Neutralization of Alternate XSS Syntax in iris-web CVE-2024-25640 4.6 MediumFebruary 19, 2024
• dfir-iris iris, iris-web +1 more Improper Neutralization of Alternate XSS Syntax in iris-web CVE-2023-50712 4.6 MediumDecember 22, 2023
• dfir-iris iris, iris-web +1 more Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web CVE-2023-30615 6.3 MediumMay 25, 2023