Skip to content
Dfir-iris Iris-web vulnerabilities
-
dfir-iris iris-web
IRIS through 2.4.29 Unauthorized Comment Access via Object ID
CVE-2026-92605
7.1 High
-
dfir-iris iris-web
DFIR-IRIS Insufficient Logout Implementation
CVE-2026-16970
4.2 Medium
-
dfir-iris iris-web
DFIR-IRIS Missing Brute Force Protection in User Authentication
CVE-2026-18362
5.9 Medium
-
dfir-iris iris-web
DFIR-IRIS Missing Brute Force Protection in OTP Validation
CVE-2026-16971
5.9 Medium
-
dfir-iris iris-web
DFIR-IRIS Stored XSS in Datastore Upload
CVE-2026-18361
7.6 High
-
dfir-iris iris-web
DFIR-IRIS Stored XSS in Custom Attributes
CVE-2026-18360
7.6 High
-
dfir-iris iris-web
DFIR-IRIS Stored XSS in Assets
CVE-2026-16969
7.6 High
-
dfir-iris iris-web
IRIS Alerts Can be Falsely Attributed to Customers
CVE-2026-42547
5.4 Medium
-
dfir-iris iris-web
IRIS has a Cross-Site Request Forgery (CSRF) issue
CVE-2026-42543
4.3 Medium
-
dfir-iris iris-web
IRIS has a Mass Assignment issue
CVE-2026-42540
4.3 Medium
-
dfir-iris iris-web
IRIS has an Excessive Data Exposure issue
CVE-2026-42539
6.5 Medium
-
dfir-iris iris-web
IRIS has an Insecure File Upload
CVE-2026-42538
6.3 Medium
-
dfir-iris iris-web
Iris has an Open Redirect issue
CVE-2026-42329
4.7 Medium
-
dfir-iris iris-web
Iris has an Improper Authorization issue
CVE-2026-41522
7.1 High
-
dfir-iris iris, iris-web +1 more
Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management
CVE-2026-22783
9.6 Critical
-
dfir-iris iris, iris-web +1 more
iris-web vulnerable to Server Side Template Injection in reports
CVE-2024-25624
6.8 Medium
-
dfir-iris iris, iris-web +1 more
Improper Neutralization of Alternate XSS Syntax in iris-web
CVE-2024-25640
4.6 Medium
-
dfir-iris iris, iris-web +1 more
Improper Neutralization of Alternate XSS Syntax in iris-web
CVE-2023-50712
4.6 Medium
-
dfir-iris iris, iris-web +1 more
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web
CVE-2023-30615
6.3 Medium