CVE-2026-95649 · Other
NO FIX YET
IRISPowerscan does not restrict which scripts it runs, so a logged-in user who can import or edit scripts can have the application execute their code. The code runs with the security context of the Windows user running IRISPowerscan.
first public Nov 4, 2026 · 1 source
Is this in your stack? Find out in 2 minutes.
Tell InfraStack what you run. It checks this one, and every next one, against your stack.
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
Teams that run IRISPowerscan on Windows machines where more than one person has access to its script functionality are exposed. The sources do not name affected versions or say whether the flaw needs a particular configuration, so the exact exposure is unknown.
Not affected if auth-required
Who cares irispowerscan, windows
Unknown from the sources.
No fix yet, per the sources.
IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running IRISPowerscan.
This page as .md · .json · in your agent: get_signal("CVE-2026-95649") · CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.