ALSA-2026:53844 Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol IP networks...

KB5120238: Windows 10 version 1809 / Windows Server 2019 Security Update (August 2026)

The remote Windows host is missing security update 5120238. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

PT-2026-70689

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A heap-based buffer overflow occurs in the Windows iSCSI Target Service. This issue allows an unauthorized attacker to cause a denial of service over a network. A...

PT-2026-70664

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description A null pointer dereference in the Windows iSCSI Target Service allows an unauthorized attacker to cause a denial of service over a network. A null pointer dereference...

KB5120386: Windows Server 2012 Security Update (August 2026)

The remote Windows host is missing security update 5120386. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service iSNS protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices using iFCP gateways on a TCP/IP network. Security Fixes:...

Important: iscsi-initiator-utils security, bug fix, and enhancement update

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol IP networks...

RHEL 10 : iscsi-initiator-utils (RHSA-2026:53845)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:53845 advisory. The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface iSCSI protocol, as well as t...

KB5120418: Windows 10 Version 1607 / Windows Server 2016 Security Update (August 2026)

The remote Windows host is missing security update 5120418. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

KB5120385: Windows Server 2012 R2 Security Update (August 2026)

The remote Windows host is missing security update 5120385. It is, therefore, affected by multiple vulnerabilities - Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network. CVE-2026-62878 - Use after free in Windows Deployment Services allows an...

CentOS 9 : kernel-5.14.0-734.el9

"The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the kernel-5.14.0-734.el9 build changelog. - In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix CRC overread and double-free in...

CVE-2026-44944 affecting package iscsi-initiator-utils for versions less than 2.1.12-1

CVE-2026-44944 affecting package iscsi-initiator-utils for versions less than 2.1.12-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-44943 affecting package iscsi-initiator-utils for versions less than 2.1.12-1

CVE-2026-44943 affecting package iscsi-initiator-utils for versions less than 2.1.12-1. An upgraded version of the package is available that resolves this issue...

Double-free in the iSNS attribute decoder in open-iscsi

...

iscsiuio control-socket authentication bypass in open-iscsi

...

remote limited file-write as root via discovery in open-iscsi

...

SUSE CVE-2026-55995

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb...

Fedora 45 : iscsi-initiator-utils (2026-004b11bc1e)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-004b11bc1e advisory. Automatic update for iscsi-initiator-utils-6.2.1.12-1.fc45. Changelog Wed Jul 29 2026 Chris Leech - 6.2.1.12-1 - rebase to Open-iSCSI 2.1.12 -...

CVE-2026-44944

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI Internet Small...

CVE-2026-44943

A flaw was found in open-iscsi. This vulnerability, known as Path Traversal, allows remote Man-in-the-Middle MITM attackers to manipulate file paths. By doing so, attackers can create files with root privileges outside the intended database and inject malicious content into system records. This...