PT-2026-136907
CVE-2026-95649
·
Published
2026-11-04
·
Updated
2026-11-04
Description by
CVSS 4.0
6.1
MediumMetricsAV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
IRISPowerscan insufficiently restrict the use of
untrusted scripts. An authenticated user with access to script functionality
can import or modify scripts that are executed by the application, potentially
resulting in arbitrary code execution in the security context of the Windows
user running IRISPowerscan.
Found an issue in the description? Have something to add? Feel free to write us 👾