Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Dell Container Storage Modules before 1.18 allow remote privilege gain

CVE-2026-63692 · published 12 days ago
Summary

Versions of Dell Container Storage Modules older than 1.18 do not check who is using a critical function. This means someone who can reach the system over the network could raise their access level without permission. Upgrade to version 1.18 or later to close the gap.

What to do
  • Update dell container storage modules to version 1.18.0 or later or later.
  • Update dell container_storage_modules to version 1.18.0 or later.
Affected software
VendorProductAffected versions
dell container storage modules < 1.18.0 or later
dell container_storage_modules < 1.18.0
cpe:2.3:a:dell:container_storage_modules:*:*:*:*:*:*:*:*
Original advisory text
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially e...
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published6 Oct 2026
Updated15 Oct 2026
First seen6 Oct 2026
Sources
CVE-2026-63692 · NVD
CVE-2026-63692 · MITRE
Track software like this
Free during beta