CVE-2026-44944Disclosure

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Incorrect Authorization vulnerability in open-iscsi allows unprivilidged local users to use the isscsiuio control socket. This issue affects open-iscsi: from ? through 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-863

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 1 classified signal
False Positive: 1 classified signal
Peaked 1d ago at 1 mentions (2026-07-29); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

Disclosure

150.0%

False Positive

150.0%

Referenced assets1 URL

By indicator

https://windowsforum.com/security-alerts.84/cve-2026-44944-affects-linux-open-iscsi-not-windows.442466/?utm_source=x&utm_medium=social&utm_campaign=news_node84

Classification over time

Date	Total	Labels

2026-07-29	1	Disclosure1
2026-08-11	1	False Positive1

Full discourse2 posts

Windows Forum@windowsforum78d
False Positive
🛡️ CVE-2026-44944 hits Linux Open-iSCSI’s iscsiuio—not Windows or its iSCSI Initiator. Microsoft’s listing may cause panic, but this “Windows” alert belongs in the Linux aisle. https://windowsforum.com/security-alerts.84/cve-2026-44944-affects-linux-open-iscsi-not-windows.442466/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #LinuxSecurity #OpenIscsi #Cve202644944 #Iscsiuio https://t.co/6jiPfJ1LID
Post summary
The post clarifies that CVE‑2026‑44944 only impacts Linux Open‑iSCSI’s iscsiuio component and not Windows, debunking a misleading Microsoft alert.
0000042
1.3K followersView on X
Upwind Security MDR@UpwindMDR91d
Disclosure
🚨High - open-iscsi isscsiuio Control Socket Authorization Bypass (CVE-2026-44944) open-iscsi’s isscsiuio exposes a control socket with incorrect authorization checks, allowing unprivileged local users to connect and issue control operations. Exploitation is via direct access to the isscsiuio control socket, leading to unauthorized iSCSI offload management actions. 👉Affected: open-iscsi git revisions up to 668ca1df9c9a1e9bdd5c999ae1d67c9c8909237e
Post summary
The post announces CVE-2026-44944, detailing how unprivileged local users can bypass authorization on open-iscsi's isscsiuio control socket to perform unauthorized operations, with no mention of patches, PoC, or exploitation.
0000068
274 followersView on X

Explore more

Back to dashboard