open-iscsi vulnerabilities

Products

• open-iscsi 3

Latest open-iscsi CVEs

Newest publication first

1. CVE-2026-55995 Double-free in the iSNS attribute decoder in open-iscsi

   Published 2026-07-29

   High·CVSS 8.7 EPSS 0.25%

   A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

2. CVE-2026-44944 iscsiuio control-socket authentication bypass in open-iscsi

   Published 2026-07-29

   High·CVSS 8.5 EPSS 0.09%

   An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

3. CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

   Published 2026-07-29

   Medium·CVSS 6.9 EPSS 0.39%

   An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.