CVE-2026-68898
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk58th percentile - higher than 58% of all known CVEs
Summary
A vulnerability in Windows iSCSI causes an out-of-bounds read, allowing an unauthorized attacker to deny service over a network.
Risk Assessment
The risk is potential disruption of iSCSI services, which may lead to unavailability of systems and data.
Recommendation
Restrict network access to iSCSI services and apply security patches.
Other vulnerabilities in Windows iSCSI
See all- CVE-2026-73025Critical
Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a security feature over a network.
- CVE-2026-69628High
Heap-based buffer overflow in Windows iSCSI allows an authorized attacker to execute code over a network.
- CVE-2026-69598High
Incorrect calculation of buffer size in Windows iSCSI allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Out-of-bounds read in Windows iSCSI allows an unauthorized attacker to deny service over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS