CVE-2026-95649 — Vulnerability intelligence
—
Published:
- CVSS
- 6.1
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
IRISPowerscan insufficiently restrict the use of
untrusted scripts. An authenticated user with access to script functionality
can import or modify scripts that are executed by the application, potentially
resulting in arbitrary code execution in the security context of the Windows
user running IRISPowerscan.