CVE-2026-94460
IRISPowerscan Insecure default privilege assignment for installation account
Description
IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| I.R.I.S S.A. | IRISPowerscan | ≤12.3 |
References
External links from the record. They lead to third-party sites.