← CVE Intelligence

CVE-2026-16970

DFIR-IRIS Insufficient Logout Implementation PUBLISHED

Description (CNA)

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time.

Affected (CNA)

Vendor / productVersions
dfir-iris / iris-webaffected 2.4.26

CWE

CWE-613

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.