The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_1507 advisory.

    This advisory aggregates security fixes for the iscsi-initiator-utils SRPM in CIQ LTS 9.6. It addresses 2     CVEs: CVE-2026-44943, CVE-2026-44944.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-2026_53845 advisory.

    * open-iscsi: open-iscsi: Authentication bypass in iscsiuio control socket (CVE-2026-44944)

    * open-iscsi: open-iscsi: Privilege Escalation via Path Traversal (CVE-2026-44943)

    Bug Fix(es) and Enhancement(s):

    * [FJ10.1 Bug]: iscsiadm reports node.discovery_type as fw, although it should be static.
    [rhel-10.2.z] (JIRA:Rocky Linux-191899)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-     iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into     the record.






    This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

    A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-     initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters     and oversized injected keys or values to inject extra configuration lines into persisted node records.
    When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to     denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config     in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in     usr/discovery.c.(CVE-2026-18724)

Tenable has extracted the preceding description block directly from the EulerOS open-iscsi security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-     initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters     and oversized injected keys or values to inject extra configuration lines into persisted node records.
    When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to     denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config     in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in     usr/discovery.c.(CVE-2026-18724)

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-     iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into     the record.






    This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

Tenable has extracted the preceding description block directly from the EulerOS open-iscsi security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the open-iscsi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    A stack buffer overflow vulnerability exists in the idbm_recinfo_config() function in open-iscsi (iscsi-     initiator-utils). An attacker can craft a malicious SendTargets TargetName containing newline characters     and oversized injected keys or values to inject extra configuration lines into persisted node records.
    When the record is reparsed, due to missing bounds checking, a stack buffer overflow occurs, leading to     denial of service or potential memory corruption. The affected component is usr/idbm.c:idbm_recinfo_config     in iscsi-initiator-utils, with attacker-controlled input reaching it through SendTargets handling in     usr/discovery.c.(CVE-2026-18724)

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-     iscsi allows remote MITM attackers   to create root-owned files outside the database and inject lines into     the record.






    This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

Tenable has extracted the preceding description block directly from the EulerOS open-iscsi security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3647-1 advisory.

    - CVE-2026-44943: remote file-write as root via discovery (bsc#1268353).
    - CVE-2026-44944: iscsiuio control-socket auth bypass (bsc#1268352).

    Changes for open-iscsi:

    - Update to version 2.1.12.suse+0.8f77cf16:
     * Preparing for version 2.1.12 (#536)
     * iscsi-init.service: Use iscsi-gen-initiatorname
     * iscsi-gen-initiatorname use @IQN_PREFIX@ as default
     * avoid possible double free of found in idbm_rec_update_param (#528)
     * iscsi: validate interface IP against target address family (#527)
    - Update to version 2.1.11.suse+88.8e0635b3:
     * Make iface.example a doc file. (#526)
     * Updated SPEC file to deliver iface.example as a %doc      file, no longer in the database directory.
    - Update to version 2.1.11.suse+85.4ef97a15:
     * Fix unused variable warning in usr/io.c (#524)
     * Remove old rpm subdirectory, no longer needed.
     * Add tcp.congestion_control configuration option (#520)
     * Small cleanups for firmware discovery. (#522)
     * Fix incorrect parsing of node.discovery_type 'static' and 'fw' (#518)
     * iscsi_net_util: avoid copying NULL pointers with strlcpy() (#515)
     * iscsi: delay reconnect until interface has valid IP. (#511)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787396809 advisory.

  - An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-     iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into     the record. This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.
    (CVE-2026-44943)

  - An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the     isscsiuio control socket. This issue affects open-iscsi: from ? through     668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e. (CVE-2026-44944)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
354069	Rocky Linux 9.6 [CIQ] Security Update: iscsi-initiator-utils / iscsi-initiator-utils-iscsiuio / etc Multiple Vulnerabilities (ciqsa-2026_1507)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
359458	Rocky Linux 10.2 [CIQ] Security Update: iscsi-initiator-utils / iscsi-initiator-utils-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_53845)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
364827	EulerOS 2.0 SP13 : open-iscsi (EulerOS-SA-2026-4075)	Nessus	Huawei Local Security Checks	10/12/2026	10/12/2026	medium
364914	EulerOS 2.0 SP13 : open-iscsi (EulerOS-SA-2026-4166)	Nessus	Huawei Local Security Checks	10/12/2026	10/12/2026	medium
364962	EulerOS 2.0 SP11 : open-iscsi (EulerOS-SA-2026-4350)	Nessus	Huawei Local Security Checks	10/12/2026	10/12/2026	medium
376740	EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4428)	Nessus	Huawei Local Security Checks	11/6/2026	11/6/2026	medium
338648	SUSE SLED15 / SLES15 Security Update : open-iscsi (SUSE-SU-2026:3647-1)	Nessus	SuSE Local Security Checks	8/21/2026	8/21/2026	high
351989	AlmaLinux 9.2 [TuxCare] Security Update: iscsi-initiator-utils / iscsi-initiator-utils-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1787396809)	Nessus	Alma Linux Local Security Checks	9/30/2026	9/30/2026	high
376713	EulerOS 2.0 SP12 : open-iscsi (EulerOS-SA-2026-4505)	Nessus	Huawei Local Security Checks	11/6/2026	11/6/2026	medium

Detections

Analytics

Plugins Search

high

high

medium

medium

medium

medium

high

high

medium