CVE-2026-22783

CVE-2026-22783 is a high-severity vulnerability affecting DFIR-IRIS versions prior to 2.4.24, a web collaborative platform for incident responders. Authenticated users can exploit a mass assignment flaw in the file management system to delete arbitrary files on the underlying filesystem. This is achieved by uploading a file, manipulating its local name to point to a target path, and then triggering a delete operation without proper path validation. The vulnerability carries a CVSS score of 8.1 (HIGH), indicating a network-based attack with low privileges required and no user interaction, leading to high impact on integrity and availability. While there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB) is currently unavailable. However, the vulnerability has garnered significant community discussion, with 11 mentions, suggesting awareness among security researchers.