Vulnerabilities

TI-2026-84997 CVE-2026-95649 · GHSA-58m7-7939-mrxp

Untrusted scripts in IRISPowerscan allow arbitrary code execution

LOW 26

IRISPowerscan insufficiently restrict the use of untrusted scripts.

CVSS 4.0MEDIUM 6.1 Adjacent network No auth No interaction EPSS 0.00139 Published 2026-11-04 No fix listed CWE-829

TI-2026-84996 CVE-2026-94460 · GHSA-5frr-v6j5-69xc

Insecure default privilege assignment in IRISPowerscan

LOW 31

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthori…

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.00185 Published 2026-11-04 No fix listed CWE-276

TI-2026-84995 CVE-2026-94459 · GHSA-6vch-q8gf-52qp

Default accounts with predictable credentials in IRISPowerscan

LOW 31

IRISPowerscan contain default user accounts with predictable credentials.

CVSS 4.0HIGH 7.2 Adjacent network No auth No interaction EPSS 0.0015 Published 2026-11-04 No fix listed CWE-1392

Vulnerabilities

Filters

Untrusted scripts in IRISPowerscan allow arbitrary code execution

Insecure default privilege assignment in IRISPowerscan

Default accounts with predictable credentials in IRISPowerscan