Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:55:05 +0000 CVE-2026-92605 — IRIS through 2.4.29 Unauthorized Comment Access via Object ID https://db.gcve.eu/vuln/cve-2026-92605 <p><strong>Affected:</strong> dfir-iris iris-web</p> <p>IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any single case can enumerate sequential object identifiers and read comment threads from cases they have no authorization to access.</p> <p><strong>Affected:</strong> dfir-iris iris-web</p> <p>IRIS through 2.4.29 fails to properly validate case authorization in comment listing endpoints for notes, tasks, IOCs, assets, and evidence items. Attackers with access to any single case can enumerate sequential object identifiers and read comment threads from cases they have no authorization to access.</p> https://db.gcve.eu/vuln/cve-2026-92605