Read the docs

dfir-iris

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

dfir-iris records in CISA KEV

No dfir-iris vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Iris 5 records MEDIUM

Records

20 records

TI-2026-15096 CVE-2026-18361 · GHSA-gj4w-mr87-6c67

DFIR-IRIS Stored XSS in Datastore Upload

Priority HIGH 66

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00211 Published 2026-07-30 No fix listed CWE-79
TI-2026-14129 CVE-2026-16969 · GHSA-fcp4-m28j-rjrq

DFIR-IRIS Stored XSS in Assets

Priority HIGH 66

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00211 Published 2026-07-30 No fix listed CWE-79
TI-2026-30819 CVE-2026-42539

IRIS has an Excessive Data Exposure issue

Priority MEDIUM 62

IRIS is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00232 Published 2026-06-04 Fixed in 2.4.28 CWE-201
TI-2026-30818 CVE-2026-42538

IRIS has an Insecure File Upload

Priority MEDIUM 61

IRIS is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 6.3 Network Low privileges User interaction EPSS 0.00175 Published 2026-06-04 Fixed in 2.4.28 CWE-434
TI-2026-30827 CVE-2026-42547

IRIS Alerts Can be Falsely Attributed to Customers

Priority MEDIUM 58

IRIS is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00174 Published 2026-06-04 Fixed in 2.4.28 CWE-863
TI-2026-30635 CVE-2026-42329

Iris has an Open Redirect issue

Priority MEDIUM 55

Iris is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00174 Published 2026-06-04 Fixed in 2.4.28 CWE-602
TI-2026-30823 CVE-2026-42543

IRIS has a Cross-Site Request Forgery (CSRF) issue

Priority MEDIUM 53

IRIS is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00174 Published 2026-06-04 Fixed in 2.4.28 CWE-650
TI-2026-30820 CVE-2026-42540

IRIS has a Mass Assignment issue

Priority MEDIUM 53

IRIS is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00183 Published 2026-06-04 Fixed in 2.4.28 CWE-915
TI-2026-14130 CVE-2026-16970 · GHSA-7wv8-chjv-grqm

DFIR-IRIS Insufficient Logout Implementation

Priority MEDIUM 53

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00217 Published 2026-07-30 No fix listed CWE-613
TI-2024-22518 CVE-2024-34060

Arbitrary File Write in IRIS EVTX Pipeline

Priority MEDIUM 42

IrisEVTXModule is an interface module for Evtx2Splunk and Iris in order to ingest Microsoft EVTX log files.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01005 Published 2024-05-23 Fixed in 1.0.0 CWE-22
TI-2026-15095 CVE-2026-18360 · GHSA-fxc2-748w-pcjx

DFIR-IRIS Stored XSS in Custom Attributes

Priority LOW 33

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00284 Published 2026-07-30 No fix listed CWE-79
TI-2026-62461 CVE-2026-92605 · GHSA-2hv7-mq65-pgrr

IRIS through 2.4.29 Unauthorized Comment Access via Object ID

Priority LOW 31

IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00415 Published 2026-09-16 No fix listed CWE-639
TI-2026-30105 CVE-2026-41522

Iris has an Improper Authorization issue

Priority LOW 31

Iris is a web collaborative platform that helps incident responders share technical details during investigations.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00246 Published 2026-06-04 Fixed in 2.4.28 CWE-285
TI-2026-15097 CVE-2026-18362 · GHSA-qx8j-r79q-xq3m

DFIR-IRIS Missing Brute Force Protection in User Authentication

Priority LOW 27

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00373 Published 2026-07-30 No fix listed CWE-770
TI-2026-14131 CVE-2026-16971 · GHSA-rgg5-4fcv-9382

DFIR-IRIS Missing Brute Force Protection in OTP Validation

Priority LOW 26

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00332 Published 2026-07-30 No fix listed CWE-770
Open these records in search →