CVE-2026-18361 — DFIR-IRIS Stored XSS in Datastore Upload

CVE-2026-18361

DFIR-IRIS Stored XSS in Datastore Upload PUBLISHED

Description (CNA)

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function.

Vendor / product	Versions
dfir-iris / iris-web	affected 2.4.26

CWE-79

CISA-ADP

No English description supplied.