TI-2026-40390 CVE-2026-55995 · GHSA-93fw-mwmg-2g5m
Double-free in the iSNS attribute decoder in open-iscsi
Priority MEDIUM 43
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.
open-iscsi
Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
open-iscsi records in CISA KEVNo open-iscsi vulnerabilities are listed in CISA KEV.
Records
3 records
TI-2026-32810 CVE-2026-44944 · GHSA-jm64-8832-wmmq
iscsiuio control-socket authentication bypass in open-iscsi
Priority LOW 37
An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.
TI-2026-32809 CVE-2026-44943 · GHSA-36cw-9hwh-mr3c
remote limited file-write as root via discovery in open-iscsi
Priority LOW 37
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.