Redpacketsecurity Multiple High-Risk CVEs Affect Red Hat iSCSI Systems
Article Content
- •CVE-2026-115484 and CVE-2026-115486 pose high risks to Red Hat iSCSI systems.
- •Both vulnerabilities require adjacent network access for exploitation.
- •Immediate patching is advised as no active exploitation has been confirmed.
Two vulnerabilities, CVE-2026-115484 and CVE-2026-115486, were published on October 23, 2026, affecting the iscsiuio component of open-iscsi in Red Hat Enterprise Linux. CVE-2026-115484 allows an attacker on the same network segment to send a crafted DHCP response, potentially crashing the daemon or corrupting network configurations. CVE-2026-115486 involves IPv6 Neighbor Discovery traffic, enabling traffic redirection and possible tampering. Both vulnerabilities require adjacent network access and are rated as high risk. Systems using iSCSI boot or DHCP-managed interfaces are particularly vulnerable. No active exploitation has been confirmed, but immediate patching is recommended. The vulnerabilities are rated CVSS 7.6 and 7.1, respectively, indicating significant operational risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track CVE-2026-115484 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What systems are affected?
What is the recommended action?
Is there any active exploitation reported?
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…