Successful exploitation of this vulnerability could allow an attacker to view transmitted data and use that data to log into the device.
The following versions of InterSystems Corporation InterSystems IRIS for Health are affected:
InterSystems IRIS for Health 2026.2.0.221, 2026.1.0.235, 2025.3.0.226 (CVE-2026-111594, CVE-2026-111594, CVE-2026-111594)
Vendor
Equipment
InterSystems Corporation
InterSystems IRIS for Health
1 Vulnerability
Cleartext Transmission of Sensitive Information
Critical Infrastructure Sectors: Healthcare and Public Health
Countries/Areas Deployed: Worldwide
Company Headquarters Location: United States
InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view transmitted data and use that data to log into the device.
Read More
3 Affected Products
InterSystems Corporation InterSystems IRIS for Hea...