CVE-2026-16971

CVSS Score & Metrics

Base Score

5.9 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N                                    

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.

Published Date

July 30, 2026

Last Modified

July 30, 2026

CWE ID

CWE-770

Source

NVD

Vendor

dfir-iris

Product

iris-web