InterSystems Corporation InterSystems IRIS for Health
<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsma-26-295-01.json"><strong>View CSAF</strong></a></p>
<h2>Summary</h2>
<p><strong>Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.</strong></p>
<p>The following versions of InterSystems Corporation InterSystems IRIS for Health are affected:</p>
<ul>
<li>InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)</li>
</ul>
<div class="csaf-table">
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">CVSS</th>
<th role="columnheader">Vendor</th>
<th role="columnheader">Equipment</th>
</tr>
</thead>
<tbody>
<tr>
<td>v3 8.1</td>
<td>InterSystems Corporation</td>
<td>InterSystems IRIS for Health</td>
</tr>
</tbody>
</table>
<table class="tablesaw tablesaw-stack" data-tablesaw-mode="stack" data-tablesaw-minimap>
<thead>
<tr>
<th role="columnheader" data-tablesaw-priority="persist">1 Vulnerability</th>
</tr>
</thead>
<tbody>
<tr>
<td>Cleartext Transmission of Sensitive Information</td>
</tr>
</tbody>
</table>
</div>
<h3>Background</h3>
<ul>
<li><strong>Critical Infrastructure Sectors: </strong>Healthcare and Public Health</li>
<li><strong>Countries/Areas Deployed: </strong>Worldwide</li>
<li><strong>Company Headquarters Location: </strong>United States</li>
</ul>
<hr>
<h2>Vulnerabilities</h2>
<div class="c-expandable-textbox icsa-etb">
<div class="c-expandable-textbox__title">CVE-2026-111594</div>
<div class="c-expandable-textbox__body">InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.</div>
<div class="c-expandable-textbox-morebutton-wrapper"><a class="c-expandable-textbox-morebutton" href="#">Read More</a></div>
<div
CRITICAL
Severity & confidence
Source severitycritical
Platform severitycritical
Confidencehigh
Exploitationunknown
CVSS-
Affected
Reporting sources (2)
CISA - Cybersecurity Advisories
NIST NVD - National Vulnerability Database
Timeline & provenance
Published2026-10-22T18:34:16
Last updated2026-10-25T03:24:45
Ingested2026-10-22T18:34:16
FreshnessNEAR-REAL-TIME
Threat typephishing
Recommended action
No recommended action published with this item - review the original source.
Next steps
- Identify affected systems in your environment.
- Apply the vendor patch or mitigation guidance.
- Review logs for indicators described in the advisory.
- Follow the affected vendor/product to track updates.
Confidence explanation
Reported by a government or cert-grade source (CISA, NCSC, NVD, ENISA, MSRC).
Source type: gov ยท Original: CISA - Cybersecurity Advisories
