CVE-2026-111594 — InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
Published: 2026-10-22 · CVSS: 9.2 · CVSS 4.0
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7