CVE-2026-42547

CVE-2026-42547 affects IRIS (web collaborative platform). In versions prior to 2.4.28, users can create alerts for customers not assigned to them, enabling false attribution of alerts. When combined with Cross-Site Scripting, this may also allow exfiltration of alerts between customers. The advis...