CVE-2026-94459: high-severity vulnerability in I.R.I.S S.A. IRISPowerscan
IRISPowerscan Default accounts with predictable credentials
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.2epss 0.1%
IRISPowerscan contain
default user accounts with predictable credentials. An unauthenticated attacker
with access to an affected installation could use these credentials to
authenticate to the application and access functionality available to the
affected accounts, potentially resulting in unauthorised access or modification
of application data and configuration.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
I.R.I.S S.A. · IRISPowerscanRelated CVEs — I.R.I.S S.A. IRISPowerscan
In the same product, most dangerous first.