CVE-2026-18728

Name of the Vulnerable Software and Affected Versions open-iscsi (affected versions not specified)

Description An integer underflow in the iscsiuio component occurs during the parsing of the IPv4 Dynamic Host Configuration Protocol (DHCP), which is a network management protocol used to automatically assign IP addresses. A remote attacker on the same local network segment can trigger an out-of-bounds read by sending a specially crafted IPv4/UDP DHCP reply, resulting in a denial of service as the iscsiuio process crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.