{"id":"CVE-2026-63692","published":"2026-10-06T15:17:19.007","lastModified":"2026-10-09T02:17:03.937","description":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":["dell"],"products":["container storage modules"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The flaw is a missing authentication for critical functions in Dell Container Storage Modules versions prior to 1.18.0, allowing unauthenticated attackers to gain elevated privileges. This is critical as it can lead to full system compromise.","exploitability":"Exploitation is straightforward for attackers with remote access, as no authentication is required to perform critical operations.","blast_radius":"If exploited, the impact could be severe, as it allows attackers to gain full control over the storage modules, potentially leading to data theft or system compromise.","remediation":"Upgrade to version 1.18.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","rce","storage","critical"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:42:46.481Z"}}