What is CVE-2026-42539?

CVE-2026-42539 is a medium-severity vulnerability in Dfir-iris Iris-web, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 6.5/10. Published 2026-06-04.

How severe is CVE-2026-42539?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Dfir-iris Iris-web

CVE-2026-42539

IRIS is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 return sensitive data to the user which are not required for the client’s operation. Version 2.4.28…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Dfir-iris Iris-web — versions < 2.4.28

Weakness classification (CWE)

CWE-201 — Insertion of Sensitive Information into Sent Data

References

security-advisories@github.com (x_refsource_CONFIRM)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2026-42539?: CVE-2026-42539 is a medium-severity vulnerability in Dfir-iris Iris-web, classified under Insertion of Sensitive Information into Sent Data. CVSS score: 6.5/10. Published 2026-06-04.
How severe is CVE-2026-42539?: Medium severity. CVSS v3 base score is 6.5 out of 10.