PT-2026-46389 · Iris · Iris

Mkoppmann + 1 · CVE-2026-42540 · Published 2026-06-04 · Updated 2026-06-04

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions IRIS versions prior to 2.4.28

Description IRIS is a web collaborative platform designed for incident responders to share technical details during investigations. The platform allows users to alter database values through manipulated API requests.

Recommendations Update to version 2.4.28.

Exploit

Fix

Weakness Enumeration

CWE-915

Related Identifiers

CVE-2026-42540

GHSA-W78H-MX7H-QM3H

Affected Products

Iris

References · 4

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/42xxx/CVE-2026-42540.json · Exploit
• 🔥 https://github.com/dfir-iris/iris-web/security/advisories/GHSA-w78h-mx7h-qm3h · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-42540 · Security Note
• https://osv.dev/vulnerability/CVE-2026-42540 · Vendor Advisory