o
open-iscsi
Security Risk Profile
44
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 11 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 31, 2017 to present
11
Total CVEs
3
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
5.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
44/100
medium
Severity Distribution
Critical
0High
3Medium
7Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
2
Integer Underflow
2
3
Double Free
1
4
Null Pointer Dereference
1
Most Affected Products
1. redhat Enterprise Linux6
2. open-iscsi open-iscsi5
3. open-iscsi tcmu-runner4
4. Microsoft azl3 iscsi-initiator-utils 2.1.9-12
5. Microsoft azl3 isns-utils 0.102-11
Recent Vulnerabilities
See more →REDHAT-BUG-2508419
CVSS 7.0high
Jul 29, 2026🔧 No Patch
CVE-2026-55995
CVSS 8.7high
Double-free in the iSNS attribute decoder in open-iscsi
Jul 29, 2026
CVE-2026-44944
CVSS 8.5high
iscsiuio control-socket authentication bypass in open-iscsi
Jul 29, 2026
CVE-2026-44943
CVSS 6.9medium
remote limited file-write as root via discovery in open-iscsi
Jul 29, 2026
CVE-2026-18728
CVSS 6.5medium
Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing
Apr 26, 2026🔧 No Patch
CVE-2026-18727
CVSS 6.5medium
Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing
Apr 26, 2026🔧 No Patch
CVE-2026-18726
CVSS 6.5medium
Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing
Apr 26, 2026🔧 No Patch
REDHAT-BUG-1487252
CVSS 1.0low
Aug 31, 2017🔧 No Patch
REDHAT-BUG-1487251
CVSS 4.0medium
Aug 31, 2017🔧 No Patch
REDHAT-BUG-1487247
CVSS 4.0medium
Aug 31, 2017🔧 No Patch
Monitor open-iscsi in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.