iris_for_health vulnerabilities

CVEs whose affected-version data names the iris_for_health package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111594High· 8.1

yesterday

InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information

InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.

▾ TwilightInterSystems · IRIS for Healthvia CVEORG