CRITICAL 10.0 NVD

CVE-2026-63688

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

References

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-c

Published: 2026-10-06 · Source: NVD · Feed updated: 2026-10-06

This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-10-06 via NVD.

Risk Timeline

CVE Disclosed2026-10-06 · -1 days ago

Remediation Resources

Official Advisory

www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-updat

vulnfeed aggregates 9311 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.