CVE-2026-16971 — DFIR-IRIS Missing Brute Force Protection in OTP Validation

CVE-2026-16971

DFIR-IRIS Missing Brute Force Protection in OTP Validation PUBLISHED

Description (CNA)

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.

Vendor / product	Versions
dfir-iris / iris-web	affected 2.4.26

CWE-770

CISA-ADP

No English description supplied.