open-iscsi

CVE-2026-44943 has been published as a remotely reachable limited file-write flaw in Open-iSCSI’s discovery handling, with the write occurring in a root-privileged context. The immediate operational concern is not a Windows cumulative update: the affected software is the Linux Open-iSCSI...

CVE-2026-55995 is a denial-of-service flaw in the iSNS attribute decoder used by open-isns, the library and tooling commonly paired with Open-iSCSI on Linux—not a vulnerability in Microsoft’s Windows iSCSI Initiator. The upstream fix is already in the open-iscsi project’s open-isns repository...