InterSystems Corporation InterSystems IRIS for Health
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device. The following versions of InterSystems Corporation InterSystems IRIS for Health are affected: InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594) CVSS Vendor Equipment v3 8.1 InterSystems…
Summary from CISA Advisories.
Explained
The technology and terms in this story. Learn more
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- ProtocolTLS · Transport Layer SecurityThe encryption protocol behind HTTPS: it keeps traffic between two programs private and proves who the server is.
- ProtocolSSL · Secure Sockets LayerThe retired predecessor of TLS; the name lives on in product names such as OpenSSL and "SSL VPN".
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Vulnerabilities in this story
Severity and exploitation facts from NVD, FIRST, and CISA.