PULSE
LIVE33signals / 24h
ES
FEED
ransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturingransomplay reclama a First Tek · TW · Technologyransomplay reclama a Preferred Financial Group · US · Financial Servicesransomthegentlemen reclama a TopMark Funding · US · Financial Servicesransomthegentlemen reclama a Control Concepts Technology · US · Technologyransomchaos reclama a healthcarehighways.com · US · Healthcareransomgunra reclama a worldtube · KR · Technologyransomqilin reclama a WD Masonry & Concrete · US · Otherransomakira reclama a University SprinklerSystems · Manufacturingransomorova reclama a Tat Fung Textile Co., Ltd. · HK · Manufacturingransomorova reclama a Integrated Site Management · US · Professional Servicesransomorova reclama a Conceptual Designs, Inc. · US · Otherransomorova reclama a JK Capital Management Limited · HK · Financial Servicesransomorova reclama a Global Friction Products, Inc · US · Manufacturingransomaurora reclama a GILDE Handwerk Macrander GmbH & Co. KG · DE · Manufacturing
← All CVEs
CVE WatchJul 22, 2026

CVE-2026-42329

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28

CVSS

4.7

Medium

EPSS

0.2%

p7

KEV

—

Exploit Today

2

0-100

Published: Jun 4, 2026 · Last modified: Jul 22, 2026 · CWE-602

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-07-062026-08-03
Technical description

Iris is a web collaborative platform that helps incident responders share technical details during investigations. Versions prior to 2.4.28 contain a weakness where an attacker can misuse it to redirect the user to a malicious website controlled by an attacker. Version 2.4.28 fixes the issue.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-179856.5 MED
14.3%
——4Insufficient policy enforcement in Speech in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)1dCVE-2026-179746.5 MED
7.5%
——2Insufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)1dCVE-2026-179604.3 MED
10.5%
——3Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass no-referrer policy via a crafted HTML page. (Chromium security severity: Low)1dCVE-2026-179536.5 MED
14.3%
——4Insufficient policy enforcement in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)22hCVE-2026-178216.5 MED
7.5%
——2Insufficient policy enforcement in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)1dCVE-2026-178136.5 MED
14.3%
——4Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)1d