CVE-2026-76052
Awaiting Analysis
Awaiting Analysis - Queue
Unauthenticated REST API Access in IBM Storage Scale
Vulnerability report for CVE-2026-76052, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-11-08
Last updated on: 2026-11-08
Assigner: IBM Corporation
Description
Description
IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an attacker to leverage an undocumented flag to gain access to an unauthenticated path in the REST API.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| IBM | Storage Scale System | From 6.2.3.0 (inc) to 6.2.3.6 (inc) |
| IBM | Storage Scale System | From 7.0.0.0 (inc) to 7.0.1.0 (inc) |
| IBM | Storage Scale | From 6.0.0.0 (inc) to 6.0.1.0 (inc) |
| IBM | Storage Scale | From 5.2.3.0 (inc) to 5.2.3.8 (inc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-288 | The product requires authentication, but the product has an alternate path or channel that does not require authentication. |
