CVE-2026-16971

MEDIUM NVD

CVSS Score 5.9

Severity MEDIUM

Published Jul 30, 2026

Vendor unknown

Description

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.