PT-2026-46388 · Dfir Iris · Iris-Web

Published 2026-06-04 · Updated 2026-06-04 · CVE-2026-42539

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-42539

Affected Products

Iris-Web

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-42539 · Security Note
• https://github.com/dfir-iris/iris-web/security/advisories/GHSA-g588-5gmf-p5cx · Note
• http://openwall.com/lists/oss-security/2026/05/19/9 · Note