MEDIUMCVSS v4 6.1Vulnerability

CVE-2026-95649

IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running IRISPowerscan.

Properties

Severity
MEDIUM
Nvd fetched at
2026-11-04T13:33:26.764955+00:00
Cvss severity
MEDIUM
Cvss score
6.1
Retrieved at
2026-11-04T13:34:19+00:00
Score
6.1
Cvss version
4.0
Last source
NVD
Cve id
CVE-2026-95649
Cvss vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
First seen by Signal
2026-11-04T13:34:19+00:00
Vector
CVSS:4.0/AV:A/AC:H/AT:N/PR:N/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published at
2026-11-04T10:17:27.120
Last modified
2026-11-04T10:17:27.120

Related Entities (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-95649 (CVSS v4 6.1) — Ninja Signal Threat Intelligence | Ninja Signal