Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:54:02 +0000 CVE-2026-42538 — IRIS has an Insecure File Upload https://cve.radiocsirt.org/vuln/cve-2026-42538 <p><strong>Affected:</strong> dfir-iris iris-web</p> <p>IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another instance of a Cross-Site Scripting (XSS) vulnerability. Version 2.4.28 contains a patch.</p> <p><strong>Affected:</strong> dfir-iris iris-web</p> <p>IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 do not properly validate uploaded files. The application can therefore be misused to host phishing pages, amongst other things. This also creates another instance of a Cross-Site Scripting (XSS) vulnerability. Version 2.4.28 contains a patch.</p> https://cve.radiocsirt.org/vuln/cve-2026-42538