Ddfir-iris

Products

Exploited and recent CVEs

• CVE-2026-92605 Medium 6.5 IRIS through 2.4.29 Unauthorized Comment Access via Object ID 0.4%
• CVE-2026-16970 Medium 4.2 DFIR-IRIS Insufficient Logout Implementation 0.2%
• CVE-2026-18362 Medium 5.9 DFIR-IRIS Missing Brute Force Protection in User Authentication 0.4%
• CVE-2026-16971 Medium 5.9 DFIR-IRIS Missing Brute Force Protection in OTP Validation 0.3%
• CVE-2026-18361 High 7.6 DFIR-IRIS Stored XSS in Datastore Upload 0.2%
• CVE-2026-18360 High 7.6 DFIR-IRIS Stored XSS in Custom Attributes 0.3%
• CVE-2026-16969 High 7.6 DFIR-IRIS Stored XSS in Assets 0.2%
• CVE-2026-42547 Medium 5.4 IRIS Alerts Can be Falsely Attributed to Customers 0.2%
• CVE-2026-42543 Medium 4.3 IRIS has a Cross-Site Request Forgery (CSRF) issue 0.2%
• CVE-2026-42540 Medium 4.3 IRIS has a Mass Assignment issue 0.2%
• CVE-2026-42539 Medium 6.5 IRIS has an Excessive Data Exposure issue 0.2%
• CVE-2026-42538 Medium 6.3 IRIS has an Insecure File Upload 0.2%
• CVE-2026-42329 Medium 4.7 Iris has an Open Redirect issue 0.2%
• CVE-2026-41522 High 7.1 Iris has an Improper Authorization issue 0.2%
• CVE-2026-22783 Critical 9.6 Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management 0.4%
• CVE-2024-34060 High 8.8 Arbitrary File Write in IRIS EVTX Pipeline 1.0%
• CVE-2024-25624 Medium 6.8 iris-web vulnerable to Server Side Template Injection in reports 0.9%
• CVE-2024-25640 Medium 4.6 Improper Neutralization of Alternate XSS Syntax in iris-web 0.3%
• CVE-2023-50712 Medium 4.6 Improper Neutralization of Alternate XSS Syntax in iris-web 0.3%
• CVE-2023-30615 Medium 6.3 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web 0.4%