← Database

CVE-2026-42540

MEDIUM CVSS: 4.3 Published: 2026-06-04 Modified: 2026-07-22

Description

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch.

Affected Platforms

Unknown

Weakness Type

CWE-915

References