Vulnerability feed

CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run Oct 26 02:05 UTC

Critical in the last 24 hours

1603 in 30 days

Newly known exploited

In the last 24 hours, CISA KEV and vendor reports

Sources checked

Every hour, see the list

New in the last 24 hours

144-76% vs 7-day avg of 597

2 critical, 38 high, 59 medium, 25 low

Expand	Severity	Score	Advisory	Title	Source	Published
	High	7.1	CVE-2026-115486	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115486A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi lets an attacker on the same network segment send crafted IPv6 Neighbor Discovery packets that poison the ARP table and redirect traffic within the iSCSI storage network. The advisory rates it Moderate, with a preliminary CVSS v3.1 base score of 7.1 from Red Hat and cve.org, and says systems without iSCSI offload hardware are not affected. The advisory does not state a fixed version or a vendor release date, but it recommends keeping iscsiuio-managed interfaces on trusted Layer 2 segments and filtering ICMPv6 Neighbor Advertisement and Neighbor Solicitation messages from untrusted sources where operationally acceptable. Technical summary The flaw is classified as CWE-125 (out-of-bounds read). The IPv6 Neighbor Discovery handler reads link-layer address options at a fixed offset without checking that the packet contains them, and it updates the ARP table unconditionally with addresses taken from packet headers. Exploitation requires an attacker with adjacent-network access to a Layer 2 segment where iscsiuio processes IPv6 NDP traffic on a hardware iSCSI offload NIC; the iscsiuio daemon is socket-activated and runs only when that hardware is present and configured. The CVSS v3.1 vector is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L with a base score of 7.1. Affected and fixed version numbers are not stated, no patch or fixed release is named, and detection guidance is not stated beyond the mitigation advice to filter ICMPv6 types 135 and 136 from untrusted sources. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115486 Impact if exploited ConfidentialityNone IntegrityHigh AvailabilityLow How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory
	Medium	6.3	CVE-2026-115485	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115485A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi can let a nearby attacker on the same network segment crash a daemon or corrupt an iSCSI initiator name by sending a crafted DHCPv6 message. The advisory rates it Moderate, with a CVSS v3.1 base score of 6.3 from Red Hat and cve.org, and says systems without iSCSI offload hardware are not affected. The advisory's mitigation guidance is to disable DHCPv6 handling for the affected interface if it is not needed, or otherwise restrict exposure to trusted adjacent networks and filter forged DHCPv6 server traffic; it does not state a fixed version. Technical summary The vulnerability is an out-of-bounds read (CWE-125) in the DHCPv6 vendor option parser of iscsiuio, where strlen() is called on network data without a guaranteed NUL terminator, causing a read into heap memory and a 1-byte heap overwrite. Exploitation requires an attacker on the same Layer 2 segment who sends a crafted DHCPv6 Advertise message during the solicit phase, on a system with a hardware iSCSI offload NIC where iscsiuio is active. The CVSS v3.1 vector is CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, scored 6.3 by Red Hat and cve.org, with NVD showing N/A. Affected and fixed version numbers are not stated, and no patch or vendor fix release is named. Mitigations are disabling DHCPv6 handling on the interface or using firewall rules against forged DHCPv6 server traffic; detection guidance is not stated. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115485 Impact if exploited ConfidentialityLow IntegrityLow AvailabilityLow How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory
	High	7.6	CVE-2026-115484	A flaw was found in the iscsiuio component of open-iscsi Red Hat, open-iscsiRed Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, open-iscsi iscsiuio	NVD	Oct 23 01:16 UTC
CVE-2026-115484A flaw was found in the iscsiuio component of open-iscsi Executive summary A flaw in the iscsiuio component of open-iscsi lets an attacker on the same local network segment send a crafted DHCP response that can crash the daemon or corrupt its network configuration. The advisory rates it Moderate and says systems without iSCSI offload hardware are not affected. The advisory recommends restricting untrusted systems from the Layer 2 broadcast domain, using static IP addressing where DHCP is not required, and limiting DHCP/BOOTP traffic to trusted infrastructure. Technical summary The flaw is an out-of-bounds read (CWE-125) in the DHCPv4 option parser of iscsiuio, which miscalculates the length of options data and reads past a heap buffer. Exploitation requires adjacent-network access to a Layer 2 segment where iscsiuio processes IPv4 DHCP traffic on a hardware iSCSI offload NIC (Broadcom bnx2/bnx2x or QLogic qedi), and no privileges or user interaction are required. The advisory gives CVSS v3.1 base score 7.6 with vector CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H, and notes that NVD shows no score of its own. Affected and fixed package versions are not stated, and no fixed version is given. Mitigations are network isolation, static addressing, and DHCP/BOOTP filtering; the advisory gives no specific detection guidance. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from access.redhat.com/security/cve/CVE-2026-115484 Impact if exploited ConfidentialityLow IntegrityLow AvailabilityHigh How it is exploited Attack vector Adjacent network Attack complexity Low Privileges required None User interaction None Scope Unchanged CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H Affects Red Hat open-iscsi Red Hat Enterprise Linux 10 Red Hat Enterprise Linux 7 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 6 open-iscsi iscsiuio NIST National Vulnerability DatabasePublished Oct 23, 2026 01:16 UTC Read the advisory

Example	Finds
	Every word appears somewhere: title, summaries, IDs, vendor, or product
	An exact phrase
	One vendor. product: for a product, vp: for either
	Commas mean any of them, in every field
	Severity: critical, high, medium, low, or unknown
	CVSS score, with >, >=, <, or <=
	A score range
	Known exploited. is:kev works too, and kev:no leaves them out
	One source, by name
	Confidentiality impact: high, low, none, or any (low or high)
	Integrity and availability work the same way
	An advisory or CVE ID, or part of one
	A minus sign leaves out whatever the term matches

Vulnerability feed

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Executive summary

Technical summary

Impact if exploited

How it is exploited

Affects

Search syntax

Welcome to CVEsee.org

What is CVEsee.org?

Disclaimer

You are leaving CVEsee.org

Install CVEsee