CVE-2026-95649: medium-severity vulnerability in I.R.I.S S.A. IRISPowerscan
IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
10Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.1
IRISPowerscan insufficiently restrict the use of
untrusted scripts. An authenticated user with access to script functionality
can import or modify scripts that are executed by the application, potentially
resulting in arbitrary code execution in the security context of the Windows
user running IRISPowerscan.
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
I.R.I.S S.A. · IRISPowerscanRelated CVEs — I.R.I.S S.A. IRISPowerscan
In the same product, most dangerous first.