EUVD-2026-108523

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-111594

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-111594 InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device...

CVE-2026-111594

InterSystems IRIS for Health contains a vulnerability where TLS/SSL encryption is turned off by default . This configuration allows an attacker to intercept and view transmitted data, which could subsequently be used to gain unauthorized access to the device. CISA recommends minimizing network ex...

InterSystems Corporation InterSystems IRIS for Health

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize...