CVE-2026-63688: Dell Container Storage Modules

Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days.

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

Affected products

• Dell Container Storage Modules: before 1.18.0 (fixed in 1.18.0)

Published 2026-10-06. Last modified 2026-10-08.