CVE-2026-42540 – IRIS has a Mass Assignment issue

CVE ID :CVE-2026-42540

Published : June 4, 2026, 10:16 p.m. | 16 minutes ago

Description :IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 allow a user to alter values in the database via manipulated API requests. Version 2.4.28 contains a patch.

Severity: 4.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…