CVE-2026-115484

LOWCVSS 7.6 · HIGH

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the iscsiuio component of open-iscsi. The DHCPv4 option parser incorrectly calculates the length of the options data, causing it to read beyond the allocated buffer into adjacent heap memory. An attacker on the same network segment can send a crafted DHCP response to crash the daemon or corrupt its network configuration.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://access.redhat.com/security/cve/CVE-2026-115484
https://bugzilla.redhat.com/show_bug.cgi?id=2556265

Weakness type (CWE)

CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Deep dive

Full discourse1 post

VulDB 🛡@vuldb22h
⚠️ There is a new vulnerability with elevated criticality in Red Hat Enterprise Linux (CVE-2026-115484) vuldb.com/vuln/425551 https://t.co/3Q4PyYVL0x
0000084
2.3K followersView on X

Explore more

Back to dashboard