CyberSecBulletin

I.R.I.S S.A. vulnerabilities

We track 2 vulnerabilities in I.R.I.S S.A. products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.

2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score

Latest I.R.I.S S.A. vulnerabilities

  • 7.2 High severity

    IRISPowerscan: Incorrect Default Permissions

    CVE-2026-94460I.R.I.S S.A.

    IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application fun

  • 7.2 High severity

    IRISPowerscan: Use of Default Credentials

    CVE-2026-94459I.R.I.S S.A.

    IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected acco