Vendor

    Dfir-iris

    20 known vulnerabilities in products by Dfir-iris, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dfir-iris
    HighCVE-2024-34060

    Arbitrary File Write in IRIS EVTX Pipeline

    		8.8
    HighCVE-2026-92605

    IRIS through 2.4.29 Unauthorized Comment Access via Object ID

    		6.5
    CriticalCVE-2026-22783

    Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management

    		9.6
    MediumCVE-2024-25624

    iris-web vulnerable to Server Side Template Injection in reports

    		6.8
    HighCVE-2026-18360

    DFIR-IRIS Stored XSS in Custom Attributes

    		7.6
    HighCVE-2026-18361

    DFIR-IRIS Stored XSS in Datastore Upload

    		7.6
    HighCVE-2026-16969

    DFIR-IRIS Stored XSS in Assets

    		7.6
    MediumCVE-2026-18362

    DFIR-IRIS Missing Brute Force Protection in User Authentication

    		5.9
    MediumCVE-2026-16971

    DFIR-IRIS Missing Brute Force Protection in OTP Validation

    		5.9
    HighCVE-2026-41522

    Iris has an Improper Authorization issue

    		—
    MediumCVE-2026-42539

    IRIS has an Excessive Data Exposure issue

    		6.5
    MediumCVE-2026-42538

    IRIS has an Insecure File Upload

    		6.3
    MediumCVE-2026-42547

    IRIS Alerts Can be Falsely Attributed to Customers

    		5.4
    MediumCVE-2026-16970

    DFIR-IRIS Insufficient Logout Implementation

    		4.2
    MediumCVE-2023-30615

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web

    		6.3
    MediumCVE-2026-42329

    Iris has an Open Redirect issue

    		4.7
    MediumCVE-2026-42540

    IRIS has a Mass Assignment issue

    		4.3
    MediumCVE-2026-42543

    IRIS has a Cross-Site Request Forgery (CSRF) issue

    		4.3
    MediumCVE-2024-25640

    Improper Neutralization of Alternate XSS Syntax in iris-web

    		4.6
    MediumCVE-2023-50712

    Improper Neutralization of Alternate XSS Syntax in iris-web

    		4.6

    Products

    Products by Dfir-iris
    Iris-web190
    Iris50