https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:56:10.934757+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/alsa-2026:53844 ALSA-2026:53844 — Important: iscsi-initiator-utils security, bug fix, and enhancement update 2026-09-28T16:56:11.129284+00:00

Affected: AlmaLinux:9: iscsi-initiator-utils, AlmaLinux:9: iscsi-initiator-utils-iscsiuio, AlmaLinux:9: python3-iscsi-initiator-utils

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

* open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944) * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

* [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://db.gcve.eu/vuln/fkie_cve-2026-44943 fkie_cve-2026-44943 2026-09-28T16:56:11.129377+00:00

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

 https://db.gcve.eu/vuln/ghsa-36cw-9hwh-mr3c GHSA-36cw-9hwh-mr3c 2026-09-28T16:56:11.129412+00:00

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

 https://db.gcve.eu/vuln/msrc_cve-2026-44943 msrc_CVE-2026-44943 — remote limited file-write as root via discovery in open-iscsi 2026-09-28T16:56:11.129431+00:00 msrc_CVE-2026-44943 https://db.gcve.eu/vuln/oesa-2026-3337 OESA-2026-3337 — open-iscsi security update 2026-09-28T16:56:11.129455+00:00

Affected: openEuler:24.03-LTS-SP1: open-iscsi

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

 https://db.gcve.eu/vuln/opensuse-su-2026:11317-1 openSUSE-SU-2026:11317-1 — iscsiuio-0.7.8.8-112.1 on GA media 2026-09-28T16:56:11.129484+00:00

iscsiuio-0.7.8.8-112.1 on GA media

 https://db.gcve.eu/vuln/rhsa-2026:60427 RHSA-2026:60427 — Red Hat Security Advisory: iscsi-initiator-utils security update 2026-09-28T16:56:11.129499+00:00

open-iscsi: open-iscsi: Privilege Escalation via Path Traversal open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket

 https://db.gcve.eu/vuln/suse-su-2026:23157-1 SUSE-SU-2026:23157-1 — Security update for open-iscsi 2026-09-28T16:56:11.129517+00:00

Security update for open-iscsi

 https://db.gcve.eu/vuln/ubuntu-cve-2026-44943 UBUNTU-CVE-2026-44943 2026-09-28T16:56:11.129529+00:00

Affected: Ubuntu:14.04:LTS: open-iscsi, Ubuntu:Pro:16.04:LTS: open-iscsi, Ubuntu:Pro:18.04:LTS: open-iscsi, Ubuntu:20.04:LTS: open-iscsi, Ubuntu:22.04:LTS: open-iscsi, Ubuntu:24.04:LTS: open-iscsi, Ubuntu:26.04:LTS: open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.