P3Verified

CVE-2026-63688: Dell Container Storage Modules (CSM) 0 to before 1.18.0 or later

CVE-2026-63688. CVSS 3.1 base score 10.0 (CRITICAL, Vendor/CNA).

Affected technology

Dell Container Storage Modules (CSM) · 0 to before 1.18.0 or later
Dell

Description’s affected range: versions prior to v1.18.0,

Component: Not specified by the source
Function: vulnerability

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays. Vendor/CNA’s CVSS 3.1 assessment (base score 10.0/10) rates confidentiality, integrity and availability impact as high.

Published 2026-10-06 17:56:29.397284+00:00

CWE: CWE-306
CCR priority: 40.0 /100 (P3)
CVSS 3.1: 10.0 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H · Vendor/CNA
KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-06 17:57:05.567630+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-07 02:34:12.333111+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-63688.html