Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2026-94460

IRISPowerscan Insecure default privilege assignment for installation account

Description

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

I.R.I.S S.A. IRISPowerscan

Default version status: unaffected

  • 0 to ≤ 12.3affected

References