CVE-2026-63688

Critical · CVSS 10.0

CVSS: 10.0; nvd
EPSS: 0.79%; 55th pct
KEV: No
Class: other; CWE-306

Description

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

References

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Status: profiled · ingested 2026-10-08T18:00:43.000Z