CVE-2026-95649

IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running...

CVE-2026-94459

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...

CVE-2026-94460

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality...

CVE-2026-95649

The software IRISPowerscan contains a vulnerability caused by the insufficient restriction of untrusted scripts . An authenticated user with access to script functionality can import or modify scripts that are subsequently executed by the application. This flaw can lead to arbitrary code executio...

EUVD-2026-116801

IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running...

EUVD-2026-116800

IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality...

CVE-2026-94460

The IRISPowerscan software contains an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password . This vulnerability (CWE-276) could allow an unauthenticated attacker to gain unauthorized access to privileged application fu...

CVE-2026-94459

The software IRISPowerscan contains default user accounts with predictable credentials . An unauthenticated attacker with network access to an affected installation can use these credentials to authenticate and access application functionality. This vulnerability could lead to unauthorised access...

EUVD-2026-116799

IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in...