{"id":"CVE-2026-111594","aliases":[],"cve":{"records":[{"id":"CVE-2026-111594","source":"icscert","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-16T13:29:22.922Z","published":"2026-10-22T21:39:47.105Z","modified":"2026-11-02T12:36:15.892Z"}],"publishers":[{"name":"icscert","role":"CNA","organizationId":"7d14cffa-0d7d-4270-9dc0-52cabd5a23a6","modified":"2026-10-22T21:39:47.105Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-02T12:36:15.892Z"}],"references":[{"url":"https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist","tags":[],"source":"icscert"},{"url":"https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver","tags":[],"source":"icscert"},{"url":"https://wrc.intersystems.com","tags":[],"source":"icscert"},{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01","tags":[],"source":"icscert"},{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json","tags":[],"source":"icscert"}],"weaknesses":[{"id":"CWE-319","description":"CWE-319","source":"icscert"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-11-02T12:34:11.844408Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"InterSystems Corporation InterSystems IRIS for Health Cleartext Transmission of Sensitive Information","titleSource":"icscert","descriptionSource":"icscert","description":"InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.","score":9.2,"severity":"critical","published":"2026-10-22T21:39:47.105Z","modified":"2026-11-02T12:36:15.892Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"InterSystems","name":"IRIS for Health","platforms":[],"versions":[{"version":"2026.2.0.221","status":"affected"},{"version":"2026.1.0.235","status":"affected"},{"version":"2025.3.0.226","status":"affected"}],"defaultStatus":"unaffected","cpes":[],"source":"icscert","url":"https://www.cve.org/CVERecord?id=CVE-2026-111594"}],"remediation":[{"text":"InterSystems recommends users configure IRIS superserver to require SSL/TLS:  https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist  Note that there are three settings: \"Disabled\", which means that client communications do not use TLS. \"Enabled\", which means that client communications may use TLS (but they also may not) and \"Required\", which forces all client communications to use TLS.\n\n\n\nInterSystems documentation explains how to configure the server to require TLS:  https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver \n\n\n\nFor more information about how to configure a system to mitigate this vulnerability, contact InterSystems at their world wide response center:  https://wrc.intersystems.com  (login required)","source":"icscert","url":"https://www.cve.org/CVERecord?id=CVE-2026-111594"}],"references":["https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=ROARS_gsecuring_checklist","https://docs.intersystems.com/irislatest/csp/docbook/DocBook.UI.Page.cls?KEY=GSA_manage_superserver","https://wrc.intersystems.com","https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01","https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"],"sources":[{"name":"CVE","id":"CVE-2026-111594","modified":"2026-11-02T12:36:15.892Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-111594"}],"assessments":[{"source":"icscert","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","score":8.1},{"source":"icscert","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","score":9.2}],"sourceAffected":[],"observedAt":"2026-11-02T12:45:47.505Z","kev":{"status":"not-listed","checkedAt":"2026-11-05T15:00:33.530Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-02T12:50:34.821Z","attemptedAt":"2026-11-02T12:50:34.821Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-02T12:50:34.904Z","attemptedAt":"2026-11-02T12:50:34.904Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-02T12:50:36.017Z","attemptedAt":"2026-11-02T12:50:36.017Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-02T12:50:35.081Z","attemptedAt":"2026-11-02T12:50:35.081Z"}],"evidence":[{"source":"NVD","id":"CVE-2026-111594","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111594","modified":"2026-10-23T19:43:46.190","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","checkedAt":"2026-11-02T12:50:34.821Z"},{"source":"NVD","id":"CVE-2026-111594","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111594","modified":"2026-10-23T19:43:46.190","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-02T12:50:34.821Z"},{"source":"GitHub Advisory Database","id":"GHSA-qg7q-rhjp-mfxj","url":"https://github.com/advisories/GHSA-qg7q-rhjp-mfxj","modified":"2026-10-23T00:33:20Z","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-11-02T12:50:34.904Z"},{"source":"FIRST EPSS","id":"CVE-2026-111594","url":"https://www.first.org/epss/","probability":0.0019,"percentile":0.08641,"date":"2026-11-01","checkedAt":"2026-11-02T12:50:35.081Z"},{"source":"ENISA EUVD","id":"EUVD-2026-108523","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-108523","modified":"Oct 22, 2026, 9:39:47 PM","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","checkedAt":"2026-11-02T12:50:36.017Z"}],"aiSummary":{"text":"InterSystems IRIS for Health versions 2025.3.0.226, 2026.1.0.235, and 2026.2.0.221 have TLS/SSL encryption turned off by default, which may allow an attacker to view transmitted data. An attacker with access to the transmission path may use the data to log into the device. The weakness is related to cleartext transmission of sensitive information.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-02T12:46:04.868Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-111594"}]}}