Vulnerability-Lookup

CVE-2026-44944 (GCVE-0-2026-44944)

Vulnerability from cvelistv5 – Published: 2026-07-29 13:04 – Updated: 2026-07-29 14:00

Title

iscsiuio control-socket authentication bypass in open-iscsi

Summary

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Severity

8.5 (High)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-29 14:00 UTC

CWE

CWE-863 - — Incorrect Authorization

Assigner

suse mitre root

References

2 references

URL	Tags
https://bugzilla.suse.com/show_bug.cgi?id=CVE-202…
https://github.com/open-iscsi/open-iscsi/commit/6…

Impacted products

1 product

Vendor	Product	Version	CPE status
open-iscsi	open-iscsi	Affected: ? , ≤ 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e (git)	guessed

Date Public

2026-07-14 11:45

Credits

Keith at Linneman Labs

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-44944",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-29T14:00:44.787848Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-29T14:00:52.512Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "packageName": "open-iscsi",
          "product": "open-iscsi",
          "vendor": "open-iscsi",
          "versions": [
            {
              "lessThanOrEqual": "668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e",
              "status": "affected",
              "version": "?",
              "versionType": "git"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Keith at Linneman Labs"
        }
      ],
      "datePublic": "2026-07-14T11:45:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cdiv\u003eAn Incorrect Authorization vulnerability in open-iscsi allows\u0026nbsp;\u003cspan\u003eunprivilidged local users to use the isscsiuio control socket.\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cp\u003eThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.\u003c/p\u003e"
            }
          ],
          "value": "An Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the isscsiuio control socket.\n\n\n\n\n\n\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-863",
              "description": "CWE-863 \u2014 Incorrect Authorization",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-29T13:43:51.482Z",
        "orgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
        "shortName": "suse"
      },
      "references": [
        {
          "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944"
        },
        {
          "url": "https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "iscsiuio control-socket authentication bypass in open-iscsi",
      "x_generator": {
        "engine": "Vulnogram 1.0.4"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "404e59f5-483d-4b8a-8e7a-e67604dd8afb",
    "assignerShortName": "suse",
    "cveId": "CVE-2026-44944",
    "datePublished": "2026-07-29T13:04:50.575Z",
    "dateReserved": "2026-05-08T12:29:48.968Z",
    "dateUpdated": "2026-07-29T14:00:52.512Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-44944",
      "date": "2026-09-17",
      "epss": "0.00093",
      "percentile": "0.00623"
    },
    "microsoft_vex": {
      "current_release_date": "2026-08-08T01:41:29.000Z",
      "cve": "CVE-2026-44944",
      "id": "msrc_CVE-2026-44944",
      "initial_release_date": "2026-08-07T01:14:38.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "iscsiuio control-socket authentication bypass in open-iscsi",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-44944.json",
      "version": "2"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-44944\",\"sourceIdentifier\":\"meissner@suse.de\",\"published\":\"2026-07-29T13:18:46.113\",\"lastModified\":\"2026-07-30T16:43:03.817\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the isscsiuio control socket.\\n\\n\\n\\n\\n\\n\\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.\"}],\"affected\":[{\"source\":\"meissner@suse.de\",\"affectedData\":[{\"vendor\":\"open-iscsi\",\"product\":\"open-iscsi\",\"defaultStatus\":\"unaffected\",\"packageName\":\"open-iscsi\",\"versions\":[{\"version\":\"?\",\"lessThanOrEqual\":\"668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e\",\"versionType\":\"git\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"meissner@suse.de\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"HIGH\",\"vulnAvailabilityImpact\":\"HIGH\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-29T14:00:44.787848Z\",\"id\":\"CVE-2026-44944\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"meissner@suse.de\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]}],\"references\":[{\"url\":\"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944\",\"source\":\"meissner@suse.de\"},{\"url\":\"https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e\",\"source\":\"meissner@suse.de\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-09-01T14:00:11+00:00",
      "cve": "CVE-2026-44944",
      "id": "CVE-2026-44944",
      "initial_release_date": "2026-07-29T13:04:50.575000+00:00",
      "product_status:fixed": "245",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-44944.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-11T01:15:46Z",
      "cve": "CVE-2026-44944",
      "id": "CVE-2026-44944",
      "initial_release_date": "2026-08-13T01:32:23Z",
      "product_status:known_affected": "166",
      "product_status:recommended": "37",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-44944",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-44944.json",
      "version": "9"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-44944\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-29T14:00:44.787848Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-29T14:00:48.131Z\"}}], \"cna\": {\"title\": \"iscsiuio control-socket authentication bypass in open-iscsi\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Keith at Linneman Labs\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV4_0\": {\"Safety\": \"NOT_DEFINED\", \"version\": \"4.0\", \"Recovery\": \"NOT_DEFINED\", \"baseScore\": 8.5, \"Automatable\": \"NOT_DEFINED\", \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"valueDensity\": \"NOT_DEFINED\", \"vectorString\": \"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\", \"exploitMaturity\": \"NOT_DEFINED\", \"providerUrgency\": \"NOT_DEFINED\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"attackRequirements\": \"NONE\", \"privilegesRequired\": \"LOW\", \"subIntegrityImpact\": \"NONE\", \"vulnIntegrityImpact\": \"HIGH\", \"subAvailabilityImpact\": \"NONE\", \"vulnAvailabilityImpact\": \"HIGH\", \"subConfidentialityImpact\": \"NONE\", \"vulnConfidentialityImpact\": \"HIGH\", \"vulnerabilityResponseEffort\": \"NOT_DEFINED\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"open-iscsi\", \"product\": \"open-iscsi\", \"versions\": [{\"status\": \"affected\", \"version\": \"?\", \"versionType\": \"git\", \"lessThanOrEqual\": \"668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e\"}], \"packageName\": \"open-iscsi\", \"defaultStatus\": \"unaffected\"}], \"datePublic\": \"2026-07-14T11:45:00.000Z\", \"references\": [{\"url\": \"https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944\"}, {\"url\": \"https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.4\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Incorrect Authorization vulnerability in open-iscsi allows\\u00a0unprivilidged local users to use the isscsiuio control socket.\\n\\n\\n\\n\\n\\n\\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cdiv\u003eAn Incorrect Authorization vulnerability in open-iscsi allows\u0026nbsp;\u003cspan\u003eunprivilidged local users to use the isscsiuio control socket.\u003c/span\u003e\u003c/div\u003e\u003cdiv\u003e\u003cspan\u003e\u003cbr\u003e\u003c/span\u003e\u003c/div\u003e\u003cp\u003eThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"CWE-863 \\u2014 Incorrect Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"404e59f5-483d-4b8a-8e7a-e67604dd8afb\", \"shortName\": \"suse\", \"dateUpdated\": \"2026-07-29T13:43:51.482Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-44944\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-29T14:00:52.512Z\", \"dateReserved\": \"2026-05-08T12:29:48.968Z\", \"assignerOrgId\": \"404e59f5-483d-4b8a-8e7a-e67604dd8afb\", \"datePublished\": \"2026-07-29T13:04:50.575Z\", \"assignerShortName\": \"suse\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

alsa-2026:53844

Vulnerability from osv_almalinux

Published

2026-08-11 00:00

Modified

2026-08-12 09:24

Summary

Important: iscsi-initiator-utils security, bug fix, and enhancement update

Details

The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.

Security Fix(es):

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

[FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:53844	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-44943	REPORT
	https://access.redhat.com/security/cve/CVE-2026-44944	REPORT
	https://bugzilla.redhat.com/2508412	REPORT
	https://bugzilla.redhat.com/2508419	REPORT
	https://errata.almalinux.org/9/ALSA-2026-53844.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "iscsi-initiator-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el9_8.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "iscsi-initiator-utils-iscsiuio"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el9_8.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:9",
        "name": "python3-iscsi-initiator-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el9_8.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.  \n\nSecurity Fix(es):  \n\n  * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)\n  * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [FJ9.7 Bug][REG]: iscsiadm reports node.discovery_type as \"fw\", although it should be \"static\". [almalinux-9.8.z] (JIRA:AlmaLinux-191897)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:53844",
  "modified": "2026-08-12T09:24:36Z",
  "published": "2026-08-11T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:53844"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44943"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44944"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2508412"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2508419"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/9/ALSA-2026-53844.html"
    }
  ],
  "related": [
    "CVE-2026-44944",
    "CVE-2026-44943"
  ],
  "summary": "Important: iscsi-initiator-utils security, bug fix, and enhancement update"
}

alsa-2026:53845

Vulnerability from osv_almalinux

Published

2026-08-11 00:00

Modified

2026-08-12 09:24

Summary

Important: iscsi-initiator-utils security, bug fix, and enhancement update

Details

Security Fix(es):

open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)
open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

Bug Fix(es) and Enhancement(s):

[FJ10.1 Bug]: iscsiadm reports node.discovery_type as "fw", although it should be "static". [almalinux-10.2.z] (JIRA:AlmaLinux-191899)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

References

URL

Type

	https://access.redhat.com/errata/RHSA-2026:53845	ADVISORY
	https://access.redhat.com/security/cve/CVE-2026-44943	REPORT
	https://access.redhat.com/security/cve/CVE-2026-44944	REPORT
	https://bugzilla.redhat.com/2508412	REPORT
	https://bugzilla.redhat.com/2508419	REPORT
	https://errata.almalinux.org/10/ALSA-2026-53845.html	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "iscsi-initiator-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el10_2.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "iscsi-initiator-utils-iscsiuio"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el10_2.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "package": {
        "ecosystem": "AlmaLinux:10",
        "name": "python3-iscsi-initiator-utils"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.2.1.11-1.git4b3e853.el10_2.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "The iscsi-initiator-utils packages provide the server daemon for the Internet Small Computer System Interface (iSCSI) protocol, as well as the utility programs used to manage it. The iSCSI protocol is a protocol for distributed disk access using SCSI commands sent over Internet Protocol (IP) networks.  \n\nSecurity Fix(es):  \n\n  * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)\n  * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)\n\n\nBug Fix(es) and Enhancement(s):  \n\n  * [FJ10.1 Bug]: iscsiadm reports node.discovery_type as \"fw\", although it should be \"static\". [almalinux-10.2.z] (JIRA:AlmaLinux-191899)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n",
  "id": "ALSA-2026:53845",
  "modified": "2026-08-12T09:24:30Z",
  "published": "2026-08-11T00:00:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:53845"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44943"
    },
    {
      "type": "REPORT",
      "url": "https://access.redhat.com/security/cve/CVE-2026-44944"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2508412"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/2508419"
    },
    {
      "type": "ADVISORY",
      "url": "https://errata.almalinux.org/10/ALSA-2026-53845.html"
    }
  ],
  "related": [
    "CVE-2026-44944",
    "CVE-2026-44943"
  ],
  "summary": "Important: iscsi-initiator-utils security, bug fix, and enhancement update"
}

FKIE_CVE-2026-44944

Vulnerability from fkie_nvd - Published: 2026-07-29 13:18 - Updated: 2026-07-30 16:43

Severity

8.5 (High) - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Summary

References

	URL	Tags
	meissner@suse.de	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944
	meissner@suse.de	https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "packageName": "open-iscsi",
          "product": "open-iscsi",
          "vendor": "open-iscsi",
          "versions": [
            {
              "lessThanOrEqual": "668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e",
              "status": "affected",
              "version": "?",
              "versionType": "git"
            }
          ]
        }
      ],
      "source": "meissner@suse.de"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the isscsiuio control socket.\n\n\n\n\n\n\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e."
    }
  ],
  "id": "CVE-2026-44944",
  "lastModified": "2026-07-30T16:43:03.817",
  "metrics": {
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.5,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "HIGH",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "meissner@suse.de",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-44944",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-07-29T14:00:44.787848Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-07-29T13:18:46.113",
  "references": [
    {
      "source": "meissner@suse.de",
      "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944"
    },
    {
      "source": "meissner@suse.de",
      "url": "https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e"
    }
  ],
  "sourceIdentifier": "meissner@suse.de",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-863"
        }
      ],
      "source": "meissner@suse.de",
      "type": "Secondary"
    }
  ]
}

GHSA-JM64-8832-WMMQ

Vulnerability from github – Published: 2026-07-29 15:31 – Updated: 2026-07-29 15:31

Details

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Severity

8.5 (High)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-44944"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-863"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-29T13:18:46Z",
    "severity": "HIGH"
  },
  "details": "An Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the isscsiuio control socket.\n\n\n\n\n\n\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.",
  "id": "GHSA-jm64-8832-wmmq",
  "modified": "2026-07-29T15:31:11Z",
  "published": "2026-07-29T15:31:11Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44944"
    },
    {
      "type": "WEB",
      "url": "https://github.com/open-iscsi/open-iscsi/commit/668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e"
    },
    {
      "type": "WEB",
      "url": "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2026-44944"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

MSRC_CVE-2026-44944

Vulnerability from csaf_microsoft - Published: 2026-08-07 01:14 - Updated: 2026-08-08 01:41

Summary

iscsiuio control-socket authentication bypass in open-iscsi

Scope

1 vulnerability in this advisory, including CVE-2026-44944.

CVE-2026-44944

Fixed: 1 product Known affected: 1 product

https://learn.microsoft.com/en-us/azure/azure-linux/tutoria…

Open the full advisory

oesa-2026-3339

Vulnerability from osv_openeuler

Published

2026-08-13 13:59

Modified

2026-08-13 13:59

Summary

open-iscsi security update

Details

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44944)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Severity

8.7 (High)


                    
                      CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

References

URL

Type

	https://www.openeuler.org/zh/security/security-bu…	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-44943	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-44944	ADVISORY
	https://nvd.nist.gov/vuln/detail/CVE-2026-55995	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "aarch64": [
          "open-iscsi-2.1.1-17.oe2003sp4.aarch64.rpm",
          "open-iscsi-debuginfo-2.1.1-17.oe2003sp4.aarch64.rpm",
          "open-iscsi-debugsource-2.1.1-17.oe2003sp4.aarch64.rpm",
          "open-iscsi-devel-2.1.1-17.oe2003sp4.aarch64.rpm"
        ],
        "noarch": [
          "open-iscsi-help-2.1.1-17.oe2003sp4.noarch.rpm"
        ],
        "src": [
          "open-iscsi-2.1.1-17.oe2003sp4.src.rpm"
        ],
        "x86_64": [
          "open-iscsi-2.1.1-17.oe2003sp4.x86_64.rpm",
          "open-iscsi-debuginfo-2.1.1-17.oe2003sp4.x86_64.rpm",
          "open-iscsi-debugsource-2.1.1-17.oe2003sp4.x86_64.rpm",
          "open-iscsi-devel-2.1.1-17.oe2003sp4.x86_64.rpm"
        ]
      },
      "package": {
        "ecosystem": "openEuler:20.03-LTS-SP4",
        "name": "open-iscsi",
        "purl": "pkg:rpm/openEuler/open-iscsi\u0026distro=openEuler-20.03-LTS-SP4"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.1.1-17.oe2003sp4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "database_specific": {
    "severity": "High"
  },
  "details": "The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.\r\n\r\nSecurity Fix(es):\n\nAn Improper Limitation of a Pathname to a Restricted Directory (\u0026apos;Path Traversal\u0026apos;) vulnerability in open-iscsi allows remote MITM attackers\u00a0 to create root-owned files outside the database and inject lines into the record.\n\n\n\n\n\n\nThis issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)\n\nAn Incorrect Authorization vulnerability in open-iscsi allows\u00a0unprivilidged local users to use the isscsiuio control socket.\n\n\n\n\n\n\nThis issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44944)\n\nA Double Free vulnerability in open-iscsi allows an\u00a0unauthenticated\u00a0MITM attacker to cause\u00a0DoS.\n\n\n\n\n\n\nThis issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)",
  "id": "OESA-2026-3339",
  "modified": "2026-08-13T13:59:58Z",
  "published": "2026-08-13T13:59:58Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3339"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44943"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44944"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55995"
    }
  ],
  "schema_version": "1.7.2",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ],
  "summary": "open-iscsi security update",
  "upstream": [
    "CVE-2026-44943",
    "CVE-2026-44944",
    "CVE-2026-55995"
  ]
}

OPENSUSE-SU-2026:21580-1

Vulnerability from csaf_opensuse - Published: 2026-08-14 06:41 - Updated: 2026-09-17 17:41

Summary

Security update for open-iscsi

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-44944.

CVE-2026-44944

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 16 products

Open the full advisory

RHSA-2026:53844

Vulnerability from csaf_opensuse - Published: 2026-08-11 00:00 - Updated: 2026-09-16 18:43

Summary

security update for iscsi-initiator-utils

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-44944.

CVE-2026-44944

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 4 products

Open the full advisory

RHSA-2026:53845

Vulnerability from csaf_opensuse - Published: 2026-08-11 00:00 - Updated: 2026-09-16 18:43

Summary

security update for iscsi-initiator-utils

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-44944.

CVE-2026-44944

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Recommended: 3 products

Open the full advisory

RHSA-2026:60427

Vulnerability from csaf_redhat - Published: 2026-08-26 23:42 - Updated: 2026-09-01 14:15

Summary

Red Hat Security Advisory: iscsi-initiator-utils security update

Severity

Important

Scope

2 vulnerabilities in this advisory, including CVE-2026-44944.

CVE-2026-44944

A flaw was found in open-iscsi. An incorrect authorization vulnerability allows unprivileged local users to bypass authentication for the iscsiuio control socket. This enables unauthorized access to the control socket, potentially leading to system compromise or disruption of iSCSI (Internet Small Computer System Interface) operations.

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Fixed: 50 products

https://access.redhat.com/errata/RHSA-2026:60427

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-44944 (GCVE-0-2026-44944)

Vulnerability from osv_almalinux

Vulnerability from osv_almalinux

Vulnerability from osv_openeuler

Tags

Sightings

Nomenclature

Related by attack behaviour