CVE-2026-18362 — DFIR-IRIS Missing Brute Force Protection in User Authentication

CVE-2026-18362

DFIR-IRIS Missing Brute Force Protection in User Authentication PUBLISHED

Description (CNA)

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks.

Vendor / product	Versions
dfir-iris / iris-web	affected 2.4.26

CWE-770

CISA-ADP

No English description supplied.