dfir-iris vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20243
3. 202615

Newest CVEs

• CVE-2026-92605

  IRIS through 2.4.29 Unauthorized Comment Access via Object ID

  dfir-iris · iris-web

  High7.1
• CVE-2026-16970

  DFIR-IRIS Insufficient Logout Implementation

  dfir-iris · iris-web

  Medium4.2
• CVE-2026-18362

  DFIR-IRIS Missing Brute Force Protection in User Authentication

  dfir-iris · iris-web

  Medium5.9
• CVE-2026-16971

  DFIR-IRIS Missing Brute Force Protection in OTP Validation

  dfir-iris · iris-web

  Medium5.9
• CVE-2026-18361

  DFIR-IRIS Stored XSS in Datastore Upload

  dfir-iris · iris-web

  High7.6
• CVE-2026-18360

  DFIR-IRIS Stored XSS in Custom Attributes

  dfir-iris · iris-web

  High7.6
• CVE-2026-16969

  DFIR-IRIS Stored XSS in Assets

  dfir-iris · iris-web

  High7.6
• CVE-2026-42547

  IRIS Alerts Can be Falsely Attributed to Customers

  dfir-iris · iris-web

  Medium5.4
• CVE-2026-42543

  IRIS has a Cross-Site Request Forgery (CSRF) issue

  dfir-iris · iris-web

  Medium4.3
• CVE-2026-42540

  IRIS has a Mass Assignment issue

  dfir-iris · iris-web

  Medium4.3