CVE-2026-95649
IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running IRISPowerscan.
| CWE | CWE-829 |
| Vendor | i.r.i.s s.a. |
| Product | irispowerscan |
| Published | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for i.r.i.s s.a. irispowerscan
Be the first to know when new unknown vulnerabilities affecting i.r.i.s s.a. irispowerscan are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
I.R.I.S S.A. / IRISPowerscan
0 ≤ 12.3
References
Credits
Paul van der Haas working with Orange Cyberdefense