by Kastro
Paper/Archive/CVE-2026-63688

CVE-2026-63688

Dell Dell Container Storage Modules (CSM) — Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in…

EPSS 0.5%CVSS 10.0
critical.is priorityof 100
38
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 41.8.418 × 208.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

Affected

ProductAffectedFixed inSource
Dell Container Storage Modules (CSM)< 1.18.0 or later1.18.0 or laterCNA

Scores by source

dell (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorydell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9