cve 2026 44943

CVE-2026-44943 is a remotely reachable limited file-write flaw in Open-iSCSI's discovery handling, with the write occurring in a root-privileged context. The affected software is the Linux Open-iSCSI userspace stack, where iscsid and iscsiadm manage discovery, login, and session management. Administrators with Linux iSCSI initiators should treat untrusted or insufficiently isolated discovery targets as the exposure point until upstream or distribution-specific remediation arrives. Microsoft's Security Update Guide hosts an entry for the CVE, but the record available on WindowsForum.com indicates the issue is not a Windows cumulative update. This tag covers the CVE's details, operational impact, and mitigation guidance for Linux iSCSI environments.