CVE-2026-63688

10.0 Critique

Publiée le 06/10/2026 à 17:17 · Modifiée le 08/10/2026 à 16:15 · Analysée par le NVD · Source : security_alert@emc.com

Description

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

Traduire en français

Produits concernés

Dell Container Storage Modules (CSM)
Dell container storage modules

Scores CVSS

Version	Score	Source	Vecteur
3.1	10.0 Critique	security_alert@emc.com	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-306

Références

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 Vendor Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories