CVE-2026-63692

Published Oct 6, 2026

Last updated 9 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2026-63692 is a security vulnerability affecting Dell Container Storage Modules (CSM), specifically impacting the authorization proxy and tenant service. The flaw allows for a complete bypass of login checks. Consequently, an unauthenticated remote attacker could exploit this issue to access and modify storage resources across all tenants managed by the system. Dell addressed this vulnerability in its security advisory DSA-2026-448, which covers multiple security issues within the CSM ecosystem. Because there are no workarounds available to mitigate the flaw, Dell recommends that affected organizations upgrade their deployments to version 1.18.0 or later to secure their storage infrastructure.

Description: Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Source: security_alert@emc.com
NVD status: Analyzed
Products: container_storage_modules

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

security_alert@emc.com: CWE-306

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:dell:container_storage_modules:*:*:*:*:*:*:*:*",
            "matchCriteriaId": "8928435D-6205-42ED-A551-DCF4AEF943A8",
            "versionEndExcluding": "1.18.0",
            "vulnerable": true
          }
        ],
        "negate": false,
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.