PT-2026-46388 · Dfir Iris · Iris-Web

Mkoppmann + 1 · Publicado 2026-06-04 · Atualizado 2026-06-04 · CVE-2026-42539

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch.

Correção

Enumeração de Fraquezas

CWE-201

Identificadores relacionados

CVE-2026-42539

Produtos afetados

Iris-Web

Referências · 3

• https://github.com/dfir-iris/iris-web/security/advisories/GHSA-g588-5gmf-p5cx · Nota
• http://openwall.com/lists/oss-security/2026/05/19/9 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-42539 · Nota de Segurança