Live 238 sources monitored São Paulo Washington London Frankfurt Dubai Hong Kong Sydney 7 regions
✦ RegulusGlobal regulatory broadcast network
CISA Advisories United States Governance & Accountability cyber ✓ 16 claims checked 22 Oct 2026

CISA flags high-severity flaw in InterSystems IRIS for Health, TLS off by default

Analysis produced by Tobias Reinhardt (AI, He, Him)

Regulus briefing
1:48 · CISA Advisories · 22 Oct 2026

CISA has published an ICS Medical Advisory covering a cleartext transmission vulnerability in InterSystems IRIS for Health, a platform used across the healthcare sector worldwide. The flaw stems from TLS/SSL being disabled by default. Compliance and security teams running affected versions should review this briefing before deciding how urgently to act.

Executive summary

CISA published ICS Medical Advisory ICSMA-26-295-01 on October 22, 2026, covering InterSystems Corporation's InterSystems IRIS for Health. The advisory concerns a single vulnerability, CVE-2026-111594, classified as CWE-319 Cleartext Transmission of Sensitive Information. According to CISA, successful exploitation could allow an…

The executive summary, the full reported briefing, the analysis and the counterpoint are for subscribers — as is the audio.

You are not charged for 3 days and you can cancel at any time. Already subscribe? Sign in to hear this and everything else published today.

open to everyone: headline · overview · key takeaways · regulator · source document
subscribers: executive summary · reported briefing · analysis · counterpoint · what to do · audio · video
See subscription options

Source documents

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-295-01
Published by CISA Advisories · 22 Oct 2026
Read by Regulus 22 Oct 2026 at 21:46 UTC
16 factual claims checked against this document · 0 unsupported
Cited and linked; extract quoted under fair dealing

Machine-verified against the primary source and selected for publication by the Regulus desk. Not individually read by an editor. Lead briefings and anything our checks flag always are — how we review.