Threats tagged 'ghsa-36cw-9hwh-mr3c'

CVE-2026-44943 is a path traversal vulnerability in the open-iscsi package used by iscsi-initiator-utils that allows remote man-in-the-middle attackers to create root-owned files outside the intended database and inject lines into records. This vulnerability affects multiple specific versions of iscsi-initiator-utils on various Linux distributions including Red Hat Enterprise Linux 9 and SUSE. Red Hat has released updated packages to address this issue. The vulnerability has a high severity rating and is accompanied by another authentication bypass vulnerability (CVE-2026-44944) fixed in the same update.