CVE-2026-111594
InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
CVSS 4.0 · 9.2 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products