<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: dfir-iris-iris-web</title><description>Every new CVE for dfir-iris-iris-web.</description><link>https://agentprime.io/</link><item><title>CVE-2026-92605: IRIS through 2.4.29 Unauthorized Comment Access via Object ID</title><link>https://agentprime.io/advisories/CVE-2026-92605/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92605/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Sep 2026 17:31:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16970: DFIR-IRIS Insufficient Logout Implementation</title><link>https://agentprime.io/advisories/CVE-2026-16970/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16970/</guid><description>CVSS 4.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:45:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18362: DFIR-IRIS Missing Brute Force Protection in User Authentication</title><link>https://agentprime.io/advisories/CVE-2026-18362/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18362/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:44:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16971: DFIR-IRIS Missing Brute Force Protection in OTP Validation</title><link>https://agentprime.io/advisories/CVE-2026-16971/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16971/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:43:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18361: DFIR-IRIS Stored XSS in Datastore Upload</title><link>https://agentprime.io/advisories/CVE-2026-18361/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18361/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:42:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-18360: DFIR-IRIS Stored XSS in Custom Attributes</title><link>https://agentprime.io/advisories/CVE-2026-18360/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-18360/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:41:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-16969: DFIR-IRIS Stored XSS in Assets</title><link>https://agentprime.io/advisories/CVE-2026-16969/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-16969/</guid><description>CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Jul 2026 09:40:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42547: IRIS Alerts Can be Falsely Attributed to Customers</title><link>https://agentprime.io/advisories/CVE-2026-42547/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42547/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 21:08:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42543: IRIS has a Cross-Site Request Forgery (CSRF) issue</title><link>https://agentprime.io/advisories/CVE-2026-42543/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42543/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 21:00:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42540: IRIS has a Mass Assignment issue</title><link>https://agentprime.io/advisories/CVE-2026-42540/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42540/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 20:57:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42539: IRIS has an Excessive Data Exposure issue</title><link>https://agentprime.io/advisories/CVE-2026-42539/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42539/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 20:54:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42538: IRIS has an Insecure File Upload</title><link>https://agentprime.io/advisories/CVE-2026-42538/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42538/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 20:48:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42329: Iris has an Open Redirect issue</title><link>https://agentprime.io/advisories/CVE-2026-42329/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42329/</guid><description>CVSS 4.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 20:47:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-41522: Iris has an Improper Authorization issue</title><link>https://agentprime.io/advisories/CVE-2026-41522/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-41522/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 Jun 2026 19:31:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-22783: Iris Allows Arbitrary File Deletion via Mass Assignment in Datastore File Management</title><link>https://agentprime.io/advisories/CVE-2026-22783/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-22783/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Jan 2026 18:27:38 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-25624: iris-web vulnerable to Server Side Template Injection in reports</title><link>https://agentprime.io/advisories/CVE-2024-25624/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25624/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 Apr 2024 16:30:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-25640: Improper Neutralization of Alternate XSS Syntax in iris-web</title><link>https://agentprime.io/advisories/CVE-2024-25640/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-25640/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Feb 2024 19:56:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-50712: Improper Neutralization of Alternate XSS Syntax in iris-web</title><link>https://agentprime.io/advisories/CVE-2023-50712/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50712/</guid><description>CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Dec 2023 19:19:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-30615: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web</title><link>https://agentprime.io/advisories/CVE-2023-30615/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-30615/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 25 May 2023 17:39:06 GMT</pubDate><category>CVE</category></item></channel></rss>