What is CVE-2026-18727?
CVE-2026-18727 is a vulnerability in the iscsiuio component of open-iscsi. It involves an integer underflow and out-of-bounds read during DHCPv6 packet parsing, which can be triggered by crafted traffic, potentially leading to remote code execution. Affected systems should update open-iscsi and monitor DHCPv6 traffic.
Azərbaycanca: CVE-2026-18727, open-iscsi paketinin iscsiuio komponentində aşkar edilmiş zəiflikdir. Bu boşluq DHCPv6 trafikinin emalı zamanı integer underflow və out-of-bounds read nəticəsində yaranır və uzaqdan kod icrasına səbəb ola bilər. Təsirə məruz qalan sistemlərdə open-iscsi proqramı yenilənməli və DHCPv6 trafikinə şübhəli yanaşılmalıdır.
Related CVEs
link basis: same weakness class CWE-125
FAQ2
In which component of open-iscsi was CVE-2026-18727 discovered?
This vulnerability was discovered in the iscsiuio component of the open-iscsi package.
What type of traffic processing can trigger CVE-2026-18727?
It can be triggered during DHCPv6 traffic processing due to an integer underflow and out-of-bounds read.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.