CVE Alert: CVE-2026-115486 – Red Hat

**Risk verdict:** Prioritise remediation on systems reachable by untrusted devices on the same local network; no active-exploitation status is provided to justify emergency-wide action.

**Why this matters:** Successful abuse can redirect traffic, enabling interception or tampering and potentially disrupting storage connectivity. This is most relevant where sensitive services a segment with less-trusted endpoints. KEV, SSVC exploitation state, PoC availability and EPSS are not supplied, so current exploitation and likelihood cannot be assessed confidently.

**Most likely attack path:** An attacker needs adjacent network access, but no credentials or victim interaction; the low-complexity path is to send crafted IPv6 neighbour-discovery traffic. Scope is unchanged, so the scored impact is on the vulnerable host rather than a directly expanded security boundary, though redirected traffic may expose dependent services to further risk.

**Who is most exposed:** Linux hosts running iSCSI initiator services are most exposed, particularly in shared or weakly segmented data-centre, virtualisation and storage networks.

Track neighbour-cache changes and flag IP-to-MAC mappings that change unexpectedly.

Investigate unusual storage-path changes, connection resets or traffic taking an unexpected route.

Mitigation and prioritisation:

Apply the vendor’s fixed package update through normal expedited patching.

Until patched, restrict affected interfaces to trusted Layer 2 segments.

Consider filtering neighbour-discovery messages from untrusted sources; validate IPv6 dependencies first.

Test storage connectivity and failover after changes, and confirm neighbour-cache stability.

A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on Patreon or Buy Me A Coffee using the buttons below.