Vulnerabilidades de Open-iscsi
CVEs publicadas que afetam produtos de Open-iscsi: 3 registro(s), com severidade, exploração e correções.
CVE-2026-55995
Alta · 8.7
CWE-415 29/07/2026
Double-free in the iSNS attribute decoder in open-iscsi
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.
This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
CVE-2026-44944
Alta · 8.5
CWE-863 29/07/2026
iscsiuio control-socket authentication bypass in open-iscsi
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
CVE-2026-44943
Média · 6.9
CWE-22 29/07/2026
remote limited file-write as root via discovery in open-iscsi
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.
This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.