Dfir-iris vulnerabilities
We track 3 vulnerabilities in Dfir-iris products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 4, 2026.
Latest Dfir-iris vulnerabilities
- 7.1 High severity
iris-web: Improper Authorization
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to version 2.4.28, DFIR-IRIS exposes an optional GraphQL endpoint at `/graphql` that does not enforce the same authorization checks as the
- 8.1 High severity
iris-web: Unrestricted Upload of File with Dangerous Type
Iris is a web collaborative platform that helps incident responders share technical details during investigations. Prior to 2.4.24, the DFIR-IRIS datastore file management system has a vulnerability where mass assignment of the file_local_name field combined w
- 8.8 High severity
iris-evtx-module: Improper Limitation of a Pathname to a Restricted Directory
IrisEVTXModule is an interface module for Evtx2Splunk and Iris in order to ingest Microsoft EVTX log files. The `iris-evtx-module` is a pipeline plugin of `iris-web` that processes EVTX files through IRIS web application. During the upload of an EVTX through t