Security Advisory

CVE-2026-18360

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 09:41:18

Last updated 2026-07-30 13:04:26

Assigner sba-research

CVSS score not scored

State PUBLISHED

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.