← Database

CVE-2026-63688

CRITICAL CVSS: 10.0 Published: 2026-10-06 Modified: 2026-10-06

Description

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

Affected Platforms

Unknown

Weakness Type

CWE-306

References