CVE-2026-111594 — Vulnerability intelligence

InterSystems — IRIS for Health

Published: 2026-10-22T21:39:47.105Z

CVSS

9.2

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.

Sources

• CVE-2026-111594
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• Original advisory
• CVE-2026-111594