Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-42539

IRIS has an Excessive Data Exposure issue

Description

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28 contains a patch.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dfir-iris iris-web

  • < 2.4.28affected

References