CVE-2026-55995: A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS.
This issue affects open-iscsi: from ? through 56718d4e9d1a4f51c30697b5c0534144bb41c9bb.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-55995
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2026-559950.25% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 17% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-55995 | coverage & exploitation status | NVD · CVE.org |
Recent advisories for A Double Free
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownCVE-2026-17573: A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file…nvd · 2026-07-27
- unknownCVE-2026-64517: In the Linux kernel, the following vulnerability has been resolved: drm/xe/gsc: Fix double-fre…nvd · 2026-07-25
- highCVE-2026-64447: In the Linux kernel, the following vulnerability has been resolved: staging: media: ipu7: fix …nvd · 2026-07-25
- criticalCVE-2026-64387: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query dir…nvd · 2026-07-25
- criticalCVE-2026-64386: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix query_inf…nvd · 2026-07-25
- criticalCVE-2026-64385: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double-fr…nvd · 2026-07-25
More from NVD Recent CVEs
- unknownCVE-2026-55735: Improper Verification of Cryptographic Signature in ueberauth guardian allows an unauthenticat…2026-08-01
- unknownCVE-2026-55734: Allocation of Resources Without Limits or Throttling vulnerability in ueberauth guardian (Guar…2026-08-01
- unknownCVE-2026-55733: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01
- unknownCVE-2026-54894: Allocation of Resources Without Limits or Throttling in ueberauth guardian allows denial of se…2026-08-01
- mediumCVE-2026-67355: guzzlehttp/guzzle versions before 7.15.1 fail to preserve host-only cookie scope, storing the …2026-08-01