CVE-2026-42329 Details

A moderate open redirect vulnerability has been identified in the DFIR IRIS web application, specifically in versions through 2.4.27. This vulnerability allows an attacker to redirect users to a malicious website under their control. The issue arises from insufficient input validation in the redirect mechanism, enabling the manipulation of redirect targets to external, potentially harmful domains. Exploitation involves crafting a link that appears to lead to an IRIS login page but instead redirects to an attacker-controlled site, facilitating phishing attempts.

Users are advised to update to IRIS version 2.4.28 or later. Additionally, if possible, avoid creating redirect targets that include user input, or implement input validation to ensure only approved redirect destinations are allowed.