CVE-2026-63688CWE-306

CVE-2026-63688

Critical · published October 6, 2026

CVSS v3.1
10.0
EPSS
1%
Percentile
55.8
In the wild
Unconfirmed
What it is

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00791 · 55.8th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-10-06T19:17Z
Affected products (1)
ProductVersionsFixed in
dell/container_storage_modules< 1.18.01.18.0
References (1)
https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 · [email protected]
EPSS history
Timeline
  • 08 OCT 03:31Z
    EPSS moved — → 1%
    epss
  • 06 OCT 14:32Z
    Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the…
    cvelistv5