VDB

CVE-2026-44944

CVE-2026-44944 PUBLISHED CVSS 8.5 HIGH

Reported by suse · Published July 29, 2026

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Risk Scores

CVSS 4.0
8.5
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected Products

VendorProductVersions
open-iscsiopen-iscsi?
open-iscsiopen-iscsi?

Timeline

  • Jul 29, 2026 Coalition ESS Score
  • Jul 29, 2026 CVE Published
  • Jul 29, 2026 CVE Updated
  • Aug 7, 2026 EPSS Score
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Security Advisory
  • Aug 12, 2026 Distribution Patch
  • Aug 12, 2026 Security Advisory
  • Aug 13, 2026 Security Advisory
  • Aug 20, 2026 Distribution Patch
  • Aug 20, 2026 Distribution Patch

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›