{"id":"CVE-2026-94460","kind":"vulnerability","aliases":["CVE-2026-94460"],"related":[],"title":"IRISPowerscan: default installation account has elevated privileges and a predictable password","description":"IRISPowerscan contain an insecure default\nconfiguration where the built-in installation account is assigned elevated\nprivileges with a predictable password, which could allow an unauthenticated\nattacker to gain unauthorised access to privileged application functionality.","summary":"IRISPowerscan ships with a built-in installation account that has elevated privileges and a predictable password. An attacker can use it to gain unauthorised access to privileged application functions.","severity":"high","cvss":7.2,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["default-credentials","industrial-software","infrastructure","irispowerscan","windows"],"not_affected_if":["default-credentials-changed"],"how_to_check":"- Check whether the IRISPowerscan installation still has the built-in installation account enabled with its default password; ask I.R.I.S. support for the account name and affected versions (not published in the sources read). Per the CVSS vector, exposure is via the adjacent network, so also check which hosts on the same network can reach IRISPowerscan Server/Client.","fix":null,"status":"open","published_at":"2026-11-04T10:17:26+00:00","first_seen_at":"2026-11-04T10:26:35+00:00","triaged_at":"2026-11-04T10:27:11+00:00","updated_at":"2026-11-04T10:28:27+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-04T10:27:11Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"unknown","title":"IRISPowerscan: default installation account has elevated privileges and a predictable password","impact":"high","summary":"IRISPowerscan ships with a built-in installation account that has elevated privileges and a predictable password. An attacker can use it to gain unauthorised access to privileged application functions.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["irispowerscan","industrial-software"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"unauthenticated attacker gains privileged application access","analyst_note":"Sources give no affected versions, fix or account name; check the NVD entry and vendor advisory for details.","how_to_check":"- Check whether the IRISPowerscan installation still has the built-in installation account enabled with its default password.\n- unknown for exact product versions and the account name, as the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["default-credentials-changed"],"who_is_affected":"Sources say the flaw is a default configuration in IRISPowerscan where the built-in installation account has elevated privileges and a predictable password. Teams running IRISPowerscan should check whether that default account is still present and usable. Installations that have changed the default account credentials are likely not exposed, but the sources do not confirm this.","user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000661,"input_tokens":4099,"output_tokens":502,"severity_before":"high"},"analyst_status":"done","analyst_note":"Sources give no affected versions, fix or account name; check the NVD entry and vendor advisory for details.","search":"'-2026':13A,16A '-94460':14A,17A 'access':52B,87C 'account':4A,35B,69C 'allow':80C 'applic':55B,90C 'assign':71C 'attack':45B,83C 'built':32B,66C 'built-in':31B,65C 'configur':62C 'contain':58C 'could':79C 'credenti':20B 'cve':12A,15A 'default':2A,19B,61C 'default-credenti':18B 'elev':6A,38B,72C 'function':56B,91C 'gain':50B,85C 'industri':22B 'industrial-softwar':21B 'infrastructur':24B 'insecur':60C 'instal':3A,34B,68C 'irispowerscan':1A,25B,27B,57C 'password':11A,43B,77C 'predict':10A,42B,76C 'privileg':7A,39B,54B,73C,89C 'ship':28B 'softwar':23B 'unauthent':82C 'unauthoris':51B,86C 'use':47B 'window':26B","nicknames":[],"mitigations":[],"who_affected":"Sources say the flaw is a default configuration in IRISPowerscan where the built-in installation account has elevated privileges and a predictable password. Teams running IRISPowerscan should check whether that default account is still present and usable. Installations that have changed the default account credentials are likely not exposed, but the sources do not confirm this.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["defaultcredentials","high","industrialsoftware","infrastructure","irispowerscan","windows"],"campaign_type":null,"first_public_at":"2026-11-04T10:17:26+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"4586e0a2-224d-4f8a-9cb4-8882b208c0b3","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-94460","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94460","severity":null,"published_at":"2026-11-04T10:17:26+00:00","modified_at":"2026-11-04T10:17:26+00:00","first_seen_at":"2026-11-04T10:26:35+00:00","fetched_at":"2026-11-04T10:26:35+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-94460:1654","url":null,"severity":null,"published_at":"2026-11-04T10:28:27+00:00","modified_at":"2026-11-04T10:28:27+00:00","first_seen_at":"2026-11-04T10:28:27+00:00","fetched_at":"2026-11-04T10:28:27+00:00","note":"Only the NVD record found (CVSS 4.0 vector AV:A, i.e. adjacent network, PR:N). No I.R.I.S./vendor advisory, affected versions, fix or account name located after two searches; nothing verified. Fix status left as is: no vendor page says unfixed. To settle: I.R.I.S. partner portal / support advisory."}],"documents":[{"id":66159,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-94460","title":"NVD CVE-2026-94460","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}