{"id":"CVE-2026-95649","kind":"vulnerability","aliases":["CVE-2026-95649"],"related":[],"title":"IRISPowerscan: untrusted scripts can run code as the Windows user","description":"IRISPowerscan insufficiently restrict the use of\nuntrusted scripts. An authenticated user with access to script functionality\ncan import or modify scripts that are executed by the application, potentially\nresulting in arbitrary code execution in the security context of the Windows\nuser running IRISPowerscan.","summary":"IRISPowerscan does not restrict which scripts it runs, so a logged-in user who can import or edit scripts can have the application execute their code. The code runs with the security context of the Windows user running IRISPowerscan.","severity":"medium","cvss":6.1,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["irispowerscan","other","windows"],"not_affected_if":["auth-required"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-11-04T10:17:27+00:00","first_seen_at":"2026-11-04T10:26:35+00:00","triaged_at":"2026-11-04T10:27:15+00:00","updated_at":"2026-11-04T10:27:15+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-11-04T10:27:15Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"IRISPowerscan: untrusted scripts can run code as the Windows user","impact":"high","summary":"IRISPowerscan does not restrict which scripts it runs, so a logged-in user who can import or edit scripts can have the application execute their code. The code runs with the security context of the Windows user running IRISPowerscan.","audience":"businesses","category":"other","nicknames":[],"who_cares":["irispowerscan","windows"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Arbitrary code runs as the Windows user running IRISPowerscan.","analyst_note":"Find the affected IRISPowerscan versions and the vendor fix from the NVD entry or the vendor advisory; the sources given do not state them.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Teams that run IRISPowerscan on Windows machines where more than one person has access to its script functionality are exposed. The sources do not name affected versions or say whether the flaw needs a particular configuration, so the exact exposure is unknown.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000635,"input_tokens":4109,"output_tokens":449,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-95649':13A,16A 'access':72C 'applic':43B,86C 'arbitrari':90C 'authent':69C 'code':6A,46B,48B,91C 'context':53B,96C 'cve':11A,14A 'edit':38B 'execut':44B,83C,92C 'function':75C 'import':36B,77C 'insuffici':61C 'irispowerscan':1A,17B,20B,59B,60C,102C 'log':31B 'logged-in':30B 'modifi':79C 'potenti':87C 'restrict':23B,62C 'result':88C 'run':5A,27B,49B,58B,101C 'script':3A,25B,39B,67C,74C,80C 'secur':52B,95C 'untrust':2A,66C 'use':64C 'user':10A,33B,57B,70C,100C 'window':9A,19B,56B,99C","nicknames":[],"mitigations":[],"who_affected":"Teams that run IRISPowerscan on Windows machines where more than one person has access to its script functionality are exposed. The sources do not name affected versions or say whether the flaw needs a particular configuration, so the exact exposure is unknown.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["irispowerscan","medium","other","windows"],"campaign_type":null,"first_public_at":"2026-11-04T10:17:27+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"4586e0a2-224d-4f8a-9cb4-8882b208c0b3","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-95649","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95649","severity":null,"published_at":"2026-11-04T10:17:27+00:00","modified_at":"2026-11-04T10:17:27+00:00","first_seen_at":"2026-11-04T10:26:35+00:00","fetched_at":"2026-11-04T10:26:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}