CVE-2026-18360 — DFIR-IRIS Stored XSS in Custom Attributes

CVE-2026-18360

DFIR-IRIS Stored XSS in Custom Attributes PUBLISHED

Description (CNA)

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.

Vendor / product	Versions
dfir-iris / iris-web	affected 2.4.26

CWE-79

CISA-ADP

No English description supplied.