2346 matches found
The vulnerability of the chap_server_compute_hash() function in the drivers/target/iscsi/iscsi_target_auth.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...
MiracleLinux 8 : kernel-4.18.0-553.158.1.el8_10 (AXSA:2026-1794:77)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1794:77 advisory. kernel: sctp: purge outqueue on stale COOKIE-ECHO handling CVE-2026-52924 kernel: scsi: target: iscsi: Validate CHAPR length before base64 decode...
TencentOS Server 4: iscsi-initiator-utils (TSSA-2026:0983)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0983 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
The vulnerability of the iscsithandle_textcmd() function in the drivers/target/iscsi/iscsi_target.c module of the Linux operating system’s TCM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the iscsithandletextcmd function in the drivers/target/iscsi/iscsitarget.c module of the Linux operating system’s TCM driver is related to the execution of operations outside of the buffer. Exploiting this vulnerability could allow a remote attacker to compromise the...
CVE-2026-73025
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-69839
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
CVE-2026-69628
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network...
CVE-2026-69598
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-68898
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
CVE-2026-68895
Numeric truncation error in Internet Storage Name Service allows an authorized attacker to disclose information locally...
EUVD-2026-73895
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network...
CVE-2026-69598
CVE-2026-69598 affects Windows iSCSI and stems from an incorrect calculation of buffer size , which allows an unauthorized attacker to execute code over a network. The assigned CVSS 3.1 score is 8.8 (HIGH) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating a network-exploitable flaw with...
EUVD-2026-73778
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-73025
CVE-2026-73025 is a Security Feature Bypass vulnerability in Windows iSCSI , rooted in weak authentication that allows an unauthorized attacker to bypass a security feature over a network. The vulnerability carries a CVSS 3.1 score of 9.8 (CRITICAL) with a network attack vector, low complexity, n...
CVE-2026-68895
CVE-2026-68895 is a numeric truncation error in Internet Storage Name Service (iSNS) that allows an authorized, local attacker to disclose information. The flaw yields a CVSS 3.1 score of 5.5 (Medium) with high confidentiality impact but no integrity or availability impact, requiring low privileg...
CVE-2026-68898
Windows iSCSI is vulnerable to an out-of-bounds read that allows an unauthorized, remote attacker to cause a denial of service over a network. The CVSS 3.1 score is 6.5 (Medium) , with the attack requiring user interaction (e.g., opening a crafted file) but no prior privileges. CISA's SSVC assess...
EUVD-2026-73415
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network...
EUVD-2026-73060
Uncaught exception in Windows iSCSI Target Service allows an authorized attacker to deny service over a network...
CVE-2026-69839
CVE-2026-69839 is a denial-of-service vulnerability in the Windows iSCSI Target Service , caused by an uncaught exception that allows an authorized attacker (low privileges) to deny service over the network. The CVSS v3.1 score is 6.5 (Medium) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H,...