VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Jun 4, 2026· Updated Jun 5, 2026

CVE-2026-42538

CVE-2026-42538

Description

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another instance of a Cross-Site Scripting (XSS) vulnerability. Version 2.4.28 contains a patch.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Dfir Iris/Iris Webinferred2 versions
    <2.4.28+ 1 more
    • (no CPE)range: <2.4.28
    • (no CPE)range: <2.4.28

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.