Vulnerability in I.r.i.s S.a. Irispowerscan
CVE-2026-94460
IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.
Published .
EPSS exploit prediction
No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.
Affected products
Weakness classification (CWE)
References
- 4586e0a2-224d-4f8a-9cb4-8882b208c0b3 (vendor-advisory, patch, mitigation)