CVE-2026-95649
Received Received - Intake

IRISPowerscan Arbitrary Code Execution via Untrusted Scripts

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: Canon_EMEA

Description
IRISPowerscan insufficiently restrict the use of untrusted scripts. An authenticated user with access to script functionality can import or modify scripts that are executed by the application, potentially resulting in arbitrary code execution in the security context of the Windows user running IRISPowerscan.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-95649
EUVD
EUVD-2026-116801

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
I.R.I.S S.A. IRISPowerscan 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

IRISPowerscan does not properly restrict untrusted scripts. An authenticated user with script access can import or modify scripts that run in the application, potentially allowing arbitrary code execution with the privileges of the Windows user running IRISPowerscan.

Impact Analysis

This vulnerability could allow an attacker with authenticated access to execute malicious code on your system, potentially leading to data theft, system compromise, or further network infiltration.

Mitigation Strategies

Restrict script modification and import permissions to authorized users only. Disable script functionality for non-admin users if possible. Monitor for unauthorized script changes or executions in IRISPowerscan.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-95649. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...