CVE-2026-63690
Received Received - Intake

Dell Container Storage Modules Missing Authentication Information Disclosure

Publication date: 2026-10-06

Last updated on: 2026-10-06

Assigner: Dell

Description
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-06
Last Modified
2026-10-06
Generated
2026-10-06
AI Q&A
2026-10-06
EPSS Evaluated
N/A
NVD
CVE-2026-63690
EUVD
EUVD-2026-93466

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Dell Container Storage Modules 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Container Storage Modules before version 1.18.0 have a vulnerability where an unauthenticated attacker with adjacent network access could exploit missing authentication to disclose information. This affects modules like csi-powerflex, csi-powermax, and csi-powerstore.

Impact Analysis

An attacker could gain access to sensitive information due to missing authentication checks. This may lead to unauthorized data exposure if network access is obtained.

Compliance Impact

This vulnerability could lead to unauthorized information disclosure, potentially violating data protection requirements under GDPR or HIPAA if sensitive data is exposed.

Mitigation Strategies

Update Dell Container Storage Modules to version 1.18.0 or later to address the Missing Authentication for Critical Function vulnerability. Ensure network access controls restrict adjacent network access to critical functions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63690. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart