CVE-2026-94459
IRISPowerscan contain default user accounts with predictable credentials
- Risk score
- 46/100
- CVSS
- 7.2 v4.0
- Exploit chance (30 days)
- 0.2%
- Published
- 4 Nov 2026
Open in the live forecast Today's forecast
What to know
- What it is
- IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in unauthorised access or modif…
- Affected
- See advisory
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.2 high
References
Original description
IRISPowerscan contain default user accounts with predictable credentials. An unauthenticated attacker with access to an affected installation could use these credentials to authenticate to the application and access functionality available to the affected accounts, potentially resulting in unauthorised access or modification of application data and configuration.
Last activity 4 Nov 2026. Patch Forecast updates every hour.