CVE-2026-18726

Name of the Vulnerable Software and Affected Versions open-iscsi (affected versions not specified)

Description A flaw in the iscsiuio daemon allows a remote attacker on the same local network segment to cause a Denial of Service (DoS). By sending a specially crafted Internet Control Message Protocol version 6 (ICMPv6) Router Advertisement containing a zero-length option, an attacker can trigger an infinite loop. This results in sustained CPU usage, making the daemon unresponsive and impacting system availability. Additionally, a risk of out-of-bounds reads exists when processing a short IPv6 payload, although no memory corruption or data exposure has been confirmed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.