ipxe

iPXE network bootloader iPXE is the leading open source network boot firmware. It provides a full PXE implementation enhanced with additional features such as: boot from a web server via HTTP or HTTPS, boot from an iSCSI, FCoE, or AoE SAN, control the boot process with a script, create interactiv...

CVE-2026-90011

A flaw was found in the Linux kernel's iSCSI target component. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted login payload to an iSCSI portal configured for Challenge-Handshake Authentication Protocol CHAP. This can lead to an out-of-bounds read,...

advisories

LinnemanLabs Research and Advisories Security research, advisories, and proof-of-concept code from LinnemanLabs. Advisories and Research Links to write-ups, disclosures, and reproducible PoCs. Project| Findings / Techniques| CVEs| Result| Write-up| PoC ---|---|---|---|---|--- bluez| ?| ?| LPE to...

CVE-2026-70095

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70031

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

CVE-2026-70038

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70013

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69883

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69721

Out-of-bounds read in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69705

Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69644

Exposure of sensitive system information to an unauthorized control sphere in Windows iSCSI allows an authorized attacker to disclose information locally...

CVE-2026-69634

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to execute code over a network...

EUVD-2026-99674

Heap-based buffer overflow in Windows iSCSI allows an unauthorized attacker to deny service over a network...

EUVD-2026-99675

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-70038

A Use after free vulnerability exists in Windows iSCSI that allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-416 (Use After Free) and CWE-122 (Heap-based Buffer Overflow). Exploitation details are not provided in the documents. Rem...

CVE-2026-70013

A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to execute code over a network. The vulnerability has a High base severity score of 8.1. While the documents do not provide specific file paths or technical root causes, the impact includes potential Remote Code Execu...

CVE-2026-70031

A heap-based buffer overflow vulnerability exists in Windows iSCSI , which could allow an unauthorized attacker to cause a denial of service over a network. The vulnerability has a CVSS 3.1 base score of 7.5, reflecting a high impact on availability. No specific exploit details or exploit code ar...

EUVD-2026-99274

Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network...

CVE-2026-69883

A Use after free vulnerability in Windows iSCSI allows an unauthorized attacker to achieve Remote Code Execution (RCE) over a network. The vulnerability carries a CRITICAL base score of 9.8 , impacting confidentiality, integrity, and availability. No specific exploit details or remediation steps ...

CVE-2026-69721

An out-of-bounds read vulnerability exists in Windows iSCSI , which could allow an authorized attacker to disclose information locally . The vulnerability is associated with CWE-125 and has been assigned a CVSS v3.1 base score of 5.5 (Medium), reflecting high confidentiality impact with low compl...