A flaw was found in the iscsiuio component of open-iscsi. The IPv6 Neighbor Discovery handler accesses link-layer address options at a fixed offset without verifying the packet contains them. Additionally, the ARP table is updated unconditionally with attacker-controlled addresses from the packet headers. An attacker on the same network segment can send a minimal Neighbor Advertisement to poison the ARP table and redirect network traffic.
| CVE | CVE-2026-115486 |
|---|---|
| Severidad | HIGH |
| CVSS | 7.1 / 10 |
| EPSS | 0.2% en 30 días (percentil 10) |
| CWE | CWE-125 |
| Exposición (Shodan) | sin hosts expuestos detectados actualmente |