Security releases
Researcher credits in vendor advisories
Vendors name researchers in their own advisories. Find your line and claim it. It counts on your profile right away and gets a BugRater ID you can quote.
Vendor
-
I.r.i.s S.a. CVE-2026-95649
IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
I.r.i.s S.a. CVE-2026-94460
IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, whi
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit -
I.r.i.s S.a. CVE-2026-94459
IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these cr
1 CVE and 1 credit line. Not claimed yet.
0 of 1 credit line claimed Claim credit