CVE-2026-16969 in IRISinfo

Summary

by MITRE • 07/30/2026

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Responsible

Sba-research

Reservation

07/24/2026

Disclosure

07/30/2026

Moderation

accepted

CPE

ready

EPSS

0.00000

KEV

no

Activities

very low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!