CVE-2026-94460High· 7.2▾ TwilightIRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to pri…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
IRISPowerscan contain an insecure default configuration where the built-in installation account is assigned elevated privileges with a predictable password, which could allow an unauthenticated attacker to gain unauthorised access to privileged application functionality.
IRISPowerscan <= 12.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-95649Medium· 6.1IRISPowerscan Insufficient restriction of untrusted scripts allows arbitrary code execution
CVE-2026-94459High· 7.2IRISPowerscan Default accounts with predictable credentials
CVE-2025-8766Medium· 6.4A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images
CVE-2026-44875High· 7.8In HPE Cray Programming Environment versions 25.03 and 25.09, prior to 26.03, the method that CPE is deployed on HPCM potentially allows elevated access by a local unprivileged user.
CVE-2025-58713Medium· 6.4Rhpam: privilege escalation via excessive /etc/passwd permissions
CVE-2025-49144High· 7.3Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path