Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority LOW 37

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00093 Published 2026-07-29 Fixed CWE-863
Priority LOW 37

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00385 Published 2026-07-29 Fixed CWE-22