Skip to content
CVE PROGRAM SOURCE RECORD4.2 Medium

CVE-2026-16970

DFIR-IRIS Insufficient Logout Implementation

Description

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dfir-iris iris-web

Default version status: unknown

  • 2.4.26affected

References