Every CVE Search/ Get API key

CVE-2026-55995

Double-free in the iSNS attribute decoder in open-iscsi

8.7 HighFix available

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

0.25%Unchanged since Jul 30, 2026
90%50%10%1%

What each source reports

CVE List Score used 8.7

Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
CVE-2026-55995
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-415
Updated
2026-11-02
EUVDEUVD-2026-50330 8.7

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
EUVD-2026-50330
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-93fw-mwmg-2g5m 8.7

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. ...

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
GHSA-93fw-mwmg-2g5m
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-415
Updated
2026-11-02
NVD 8.7

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
CVE-2026-55995
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness
CWE-415
Updated
2026-11-02
OSV 8.7

Double-free in the iSNS attribute decoder in open-iscsi

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
CVE-2026-55995
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-415
Updated
2026-11-02
OSVDEBIAN-CVE-2026-55995 8.7

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
DEBIAN-CVE-2026-55995
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
Show 29 moreShow less
OSVOESA-2026-3337 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3337
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3338 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3338
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3339 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket.

This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44944)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3339
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3340 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3340
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3407 8.7

open-iscsi security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI.

Security Fix(es):

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in open-iscsi allows remote MITM attackers  to create root-owned files outside the database and inject lines into the record.

This issue affects open-iscsi: from through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.(CVE-2026-44943)

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3407
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3427 8.7

open-isns security update

The open-isns package consists of the iSNS server and client programs, which is a partial implementation of the iSNS protocol. The iSNS protocol is defined in RFC 4171 and the purpose of which is to allow it automated and convenient to discover, manage, and configure iSCSI devices.

Security Fix(es):

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.(CVE-2026-55995)

Record
OESA-2026-3427
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVRHSA-2026:53846 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:53846
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:53847 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:53847
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:53848 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:53848
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:59996 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:59996
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:59999 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:59999
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:60005 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:60005
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:60006 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:60006
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:60333 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:60333
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:60385 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:60385
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:61249 7.5

Red Hat Security Advisory: isns-utils security update

Record
RHSA-2026:61249
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:53846 7.5

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:53846
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:53847 7.5

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:53847
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:53848 7.5

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:53848
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-55995 8.7

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
UBUNTU-CVE-2026-55995
CVSS 4.0
8.7 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVALSA-2026:53846 No score

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:53846
Updated
2026-11-02
OSVALSA-2026:53847 No score

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:53847
Updated
2026-11-02
OSVALSA-2026:53848 No score

Important: isns-utils security update

The iSNS package contains the daemon and tools to setup a iSNS server, and iSNS client tools. The Internet Storage Name Service (iSNS) protocol allows automated discovery, management and configuration of iSCSI and Fibre Channel devices (using iFCP gateways) on a TCP/IP network.

Security Fix(es):

  • open-isns: open-iscsi: Denial of Service via double-free in iSNS attribute decoder (CVE-2026-55995)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:53848
Updated
2026-11-02
OSVAZL-94434 No score

CVE-2026-55995 affecting package isns-utils for versions less than 0.102-2

A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.

This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.

Record
AZL-94434
Updated
2026-11-05
OSVCLSA-2026-1787739969 No score

isns-utils: Fix of CVE-2026-55995

  • CVE-2026-55995: double free in iSNS attribute decoder error paths
Record
CLSA-2026-1787739969
Updated
2026-11-02
OSVCLSA-2026-1787740913 No score

isns-utils: Fix of CVE-2026-55995

  • CVE-2026-55995: double free in iSNS attribute decoder error paths
Record
CLSA-2026-1787740913
Updated
2026-11-02
OSVMGASA-2026-0534 No score

Updated open-isns package fixes a security vulnerability

Double-free in the iSNS attribute decoder in open-iscsi. (CVE-2026-55995)

Record
MGASA-2026-0534
Updated
2026-11-02
OSVopenSUSE-SU-2026:11456-1 No score

open-isns-0.103+4.60de8b5-1.1 on GA media

These are all security issues fixed in the open-isns-0.103+4.60de8b5-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11456-1
Updated
2026-11-02
OSVUSN-8807-1 No score

Open-iSNS vulnerability

It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service.

Record
USN-8807-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
isns-utils
AlmaLinux:10
 before 0.103-1.el10_2.1
0.103-1.el10_2.1
isns-utils-libs
AlmaLinux:10
 before 0.103-1.el10_2.1
0.103-1.el10_2.1
isns-utils
AlmaLinux:9
 before 0.101-4.el9_8.1
0.101-4.el9_8.1
isns-utils-libs
AlmaLinux:9
 before 0.101-4.el9_8.1
0.101-4.el9_8.1
isns-utils
AlmaLinux:8
 before 0.99-1.el8_10.1
0.99-1.el8_10.1
isns-utils-devel
AlmaLinux:8
 before 0.99-1.el8_10.1
0.99-1.el8_10.1
isns-utils-libs
AlmaLinux:8
 before 0.99-1.el8_10.1
0.99-1.el8_10.1
isns-utils
Azure Linux:3
 before 0.102-2
0.102-2
isns-utils
TuxCare:AlmaLinux:9.6
 before 0.101-4.el9_6.tuxcare.els1
0.101-4.el9_6.tuxcare.els1
isns-utils-devel
TuxCare:AlmaLinux:9.6
 before 0.101-4.el9_6.tuxcare.els1
0.101-4.el9_6.tuxcare.els1
Show 107 moreShow less
Affected packages
PackageAffectedFixed
isns-utils-libs
TuxCare:AlmaLinux:9.6
 before 0.101-4.el9_6.tuxcare.els1
0.101-4.el9_6.tuxcare.els1
isns-utils
TuxCare:AlmaLinux:9.2
 before 0.101-4.el9_2.tuxcare.els1
0.101-4.el9_2.tuxcare.els1
isns-utils-devel
TuxCare:AlmaLinux:9.2
 before 0.101-4.el9_2.tuxcare.els1
0.101-4.el9_2.tuxcare.els1
isns-utils-libs
TuxCare:AlmaLinux:9.2
 before 0.101-4.el9_2.tuxcare.els1
0.101-4.el9_2.tuxcare.els1
open-isns
Debian:12
 All versions, plus listed versions
0.101-0.20.101-0.30.101-0.3~exp10.101-10.101-20.101-2.10.103-10.103-2
 None known
open-isns
Debian:13
 All versions, plus listed versions
0.101-10.101-20.101-2.10.103-10.103-2
 None known
open-isns
Debian:14
 before 0.103-2, plus listed versions
0.101-10.101-20.101-2.10.103-1
0.103-2
open-isns
Mageia:10
 before 0.103-1.1.mga10
0.103-1.1.mga10
open-iscsi
openEuler:24.03-LTS-SP1
 before 2.1.5-17.oe2403sp1
2.1.5-17.oe2403sp1
open-iscsi
openEuler:24.03-LTS-SP3
 before 2.1.5-17.oe2403sp3
2.1.5-17.oe2403sp3
open-iscsi
openEuler:20.03-LTS-SP4
 before 2.1.1-17.oe2003sp4
2.1.1-17.oe2003sp4
open-iscsi
openEuler:22.03-LTS-SP4
 before 2.1.5-17.oe2203sp4
2.1.5-17.oe2203sp4
open-iscsi
openEuler:24.03-LTS-SP4
 before 2.1.5-17.oe2403sp4
2.1.5-17.oe2403sp4
open-isns
openEuler:24.03-LTS-SP3
 before 0.101-7.oe2403sp3
0.101-7.oe2403sp3
open-isns
openEuler:24.03-LTS-SP4
 before 0.101-7.oe2403sp4
0.101-7.oe2403sp4
open-isns
openEuler:20.03-LTS-SP4
 before 0.100-11.oe2003sp4
0.100-11.oe2003sp4
open-isns
openEuler:22.03-LTS-SP4
 before 0.101-5.oe2203sp4
0.101-5.oe2203sp4
open-isns
openEuler:24.03-LTS-SP1
 before 0.101-7.oe2403sp1
0.101-7.oe2403sp1
isns-utils
Red Hat:enterprise_linux:10.2
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils-debugsource
Red Hat:enterprise_linux:10.2
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils-libs
Red Hat:enterprise_linux:10.2
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils-libs-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils
Red Hat:enterprise_linux:9::baseos
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils-libs
Red Hat:enterprise_linux:9::baseos
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils-libs-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils-devel
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils-libs
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils-libs-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
isns-utils
Red Hat:rhel_e4s:9.4::baseos
 before 0:0.101-4.el9_4.1
0:0.101-4.el9_4.1
isns-utils-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:0.101-4.el9_4.1
0:0.101-4.el9_4.1
isns-utils-debugsource
Red Hat:rhel_e4s:9.4::baseos
 before 0:0.101-4.el9_4.1
0:0.101-4.el9_4.1
isns-utils-libs
Red Hat:rhel_e4s:9.4::baseos
 before 0:0.101-4.el9_4.1
0:0.101-4.el9_4.1
isns-utils-libs-debuginfo
Red Hat:rhel_e4s:9.4::baseos
 before 0:0.101-4.el9_4.1
0:0.101-4.el9_4.1
isns-utils
Red Hat:rhel_e4s:9.2::baseos
 before 0:0.101-4.el9_2.1
0:0.101-4.el9_2.1
isns-utils-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:0.101-4.el9_2.1
0:0.101-4.el9_2.1
isns-utils-debugsource
Red Hat:rhel_e4s:9.2::baseos
 before 0:0.101-4.el9_2.1
0:0.101-4.el9_2.1
isns-utils-libs
Red Hat:rhel_e4s:9.2::baseos
 before 0:0.101-4.el9_2.1
0:0.101-4.el9_2.1
isns-utils-libs-debuginfo
Red Hat:rhel_e4s:9.2::baseos
 before 0:0.101-4.el9_2.1
0:0.101-4.el9_2.1
isns-utils
Red Hat:enterprise_linux_eus:10.0
 before 0:0.103-1.el10_0.1
0:0.103-1.el10_0.1
isns-utils-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:0.103-1.el10_0.1
0:0.103-1.el10_0.1
isns-utils-debugsource
Red Hat:enterprise_linux_eus:10.0
 before 0:0.103-1.el10_0.1
0:0.103-1.el10_0.1
isns-utils-libs
Red Hat:enterprise_linux_eus:10.0
 before 0:0.103-1.el10_0.1
0:0.103-1.el10_0.1
isns-utils-libs-debuginfo
Red Hat:enterprise_linux_eus:10.0
 before 0:0.103-1.el10_0.1
0:0.103-1.el10_0.1
isns-utils
Red Hat:rhel_eus:9.6::baseos
 before 0:0.101-4.el9_6.1
0:0.101-4.el9_6.1
isns-utils-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:0.101-4.el9_6.1
0:0.101-4.el9_6.1
isns-utils-debugsource
Red Hat:rhel_eus:9.6::baseos
 before 0:0.101-4.el9_6.1
0:0.101-4.el9_6.1
isns-utils-libs
Red Hat:rhel_eus:9.6::baseos
 before 0:0.101-4.el9_6.1
0:0.101-4.el9_6.1
isns-utils-libs-debuginfo
Red Hat:rhel_eus:9.6::baseos
 before 0:0.101-4.el9_6.1
0:0.101-4.el9_6.1
isns-utils
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-debugsource
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-devel
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-libs
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-libs-debuginfo
Red Hat:rhel_e4s:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-debugsource
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-devel
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-libs
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils-libs-debuginfo
Red Hat:rhel_tus:8.8::baseos
 before 0:0.99-1.el8_8.1
0:0.99-1.el8_8.1
isns-utils
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-debugsource
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-devel
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-libs
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-libs-debuginfo
Red Hat:rhel_aus:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-debugsource
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-devel
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-libs
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils-libs-debuginfo
Red Hat:rhel_eus_long_life:8.6::baseos
 before 0:0.99-1.el8_6.1
0:0.99-1.el8_6.1
isns-utils
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-debugsource
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-devel
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-libs
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-libs-debuginfo
Red Hat:rhel_aus:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-debugsource
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-devel
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-libs
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils-libs-debuginfo
Red Hat:rhel_eus_long_life:8.4::baseos
 before 0:0.99-1.el8_4.1
0:0.99-1.el8_4.1
isns-utils
Rocky Linux:10
 before 0:0.103-1.el10_2.1
0:0.103-1.el10_2.1
isns-utils
Rocky Linux:9
 before 0:0.101-4.el9_8.1
0:0.101-4.el9_8.1
isns-utils
Rocky Linux:8
 before 0:0.99-1.el8_10.1
0:0.99-1.el8_10.1
open-iscsi
Ubuntu:14.04:LTS
 All versions, plus listed versions
2.0.873-3ubuntu72.0.873-3ubuntu82.0.873-3ubuntu9
 None known
open-iscsi
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.0.873-3ubuntu132.0.873+git0.3b4b4500-13ubuntu32.0.873+git0.3b4b4500-14ubuntu12.0.873+git0.3b4b4500-14ubuntu32.0.873+git0.3b4b4500-14ubuntu3.1
Show 7 moreShow less
2.0.873+git0.3b4b4500-14ubuntu3.22.0.873+git0.3b4b4500-14ubuntu3.32.0.873+git0.3b4b4500-14ubuntu3.42.0.873+git0.3b4b4500-14ubuntu3.52.0.873+git0.3b4b4500-14ubuntu3.62.0.873+git0.3b4b4500-14ubuntu3.72.0.873+git0.3b4b4500-14ubuntu3.7+esm1
 None known
open-iscsi
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.0.874-4ubuntu32.0.874-4ubuntu42.0.874-4ubuntu52.0.874-5ubuntu12.0.874-5ubuntu2
Show 10 moreShow less
2.0.874-5ubuntu2.12.0.874-5ubuntu2.22.0.874-5ubuntu2.32.0.874-5ubuntu2.42.0.874-5ubuntu2.62.0.874-5ubuntu2.72.0.874-5ubuntu2.92.0.874-5ubuntu2.102.0.874-5ubuntu2.112.0.874-5ubuntu2.11+esm1
 None known
open-isns
Ubuntu:Pro:18.04:LTS
 before 0.97-2ubuntu0.1~esm1, plus listed versions
0.97-20.97-2build1
0.97-2ubuntu0.1~esm1
open-iscsi
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.0.874-7.1ubuntu32.0.874-7.1ubuntu52.0.874-7.1ubuntu62.0.874-7.1ubuntu6.12.0.874-7.1ubuntu6.22.0.874-7.1ubuntu6.32.0.874-7.1ubuntu6.42.0.874-7.1ubuntu6.5
 None known
open-isns
Ubuntu:Pro:20.04:LTS
 before 0.97-3ubuntu0.1~esm1, plus listed versions
0.97-3
0.97-3ubuntu0.1~esm1
open-iscsi
Ubuntu:22.04:LTS
 All versions, plus listed versions
2.1.4-0ubuntu12.1.4-0ubuntu22.1.4-0ubuntu32.1.4-0ubuntu42.1.5-1ubuntu12.1.5-1ubuntu1.12.1.5-1ubuntu1.3
 None known
open-isns
Ubuntu:22.04:LTS
 before 0.101-0ubuntu2.1, plus listed versions
0.100-3ubuntu30.100-3ubuntu40.100-3ubuntu50.101-0ubuntu10.101-0ubuntu2
0.101-0ubuntu2.1
open-iscsi
Ubuntu:24.04:LTS
 All versions, plus listed versions
2.1.8-1ubuntu22.1.9-3ubuntu12.1.9-3ubuntu22.1.9-3ubuntu32.1.9-3ubuntu4
Show 5 moreShow less
2.1.9-3ubuntu5.12.1.9-3ubuntu5.22.1.9-3ubuntu5.32.1.9-3ubuntu5.42.1.9-3ubuntu5.5
 None known
open-isns
Ubuntu:24.04:LTS
 before 0.101-0.3ubuntu0.1, plus listed versions
0.101-0.20.101-0.30.101-0.3build10.101-0.3build20.101-0.3build3
0.101-0.3ubuntu0.1
open-iscsi
Ubuntu:26.10
 All versions, plus listed versions
2.1.11-3ubuntu32.1.11-5ubuntu12.1.11-5ubuntu42.1.11-5ubuntu52.1.11-5ubuntu6
 None known
open-iscsi
Ubuntu:26.04:LTS
 All versions, plus listed versions
2.1.11-1ubuntu32.1.11-3ubuntu12.1.11-3ubuntu22.1.11-3ubuntu32.1.11-3ubuntu3.1
 None known
open-isns
Ubuntu:26.04:LTS
 before 0.101-2.1ubuntu0.1, plus listed versions
0.101-10.101-1build10.101-20.101-2.1
0.101-2.1ubuntu0.1
open-isns
openSUSE:Tumbleweed
 before 0.103+4.60de8b5-1.1
0.103+4.60de8b5-1.1

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-55995 is a high vulnerability (CVSS 8.7) in Multiple Open Source Open-iscsi, published July 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. Fixed in isns-utils 0.103-1.el10_2.1.

References

Show 46 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open