Open-iscsi Open-iscsi vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Open-iscsi Open-iscsi: 3 record(s), with affected versions and fixes.
CVE-2026-55995
High · 8.7
CWE-415 Jul 29, 2026
Double-free in the iSNS attribute decoder in open-iscsi
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.
This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
CVE-2026-44944
High · 8.5
CWE-863 Jul 29, 2026
iscsiuio control-socket authentication bypass in open-iscsi
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
CVE-2026-44943
Medium · 6.9
CWE-22 Jul 29, 2026
remote limited file-write as root via discovery in open-iscsi
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.
This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.