CVE-2026-18727

Name of the Vulnerable Software and Affected Versions open-iscsi (affected versions not specified)

Description A flaw in the iscsiuio component involves an integer underflow and out-of-bounds read during the parsing of Dynamic Host Configuration Protocol for IPv6 (DHCPv6) packets. An unauthenticated attacker on an adjacent network segment can send crafted DHCPv6 Advertise traffic with a short User Datagram Protocol (UDP) length, causing the DHCPv6 payload length to underflow. This can be exploited while the client is in an active DHCPv6 exchange, resulting in a denial of service through a process crash or service disruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.