CVE-2026-63691: Medium severity Dell Container Storage Modules vulnerability
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Container Storage Modulesto a version that resolves this vulnerability.Fixed in 1.18.0
Event History
Frequently Asked Questions
Which deployments are exposed?
Dell Container Storage Modules deployments using the Dell CSI Driver for PowerMax csireverseproxy are affected if they run a version prior to 1.18.0 and are reachable by an attacker on an adjacent network.
Does exploitation require credentials or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated attacker, and the vector indicates no privileges or user interaction are required.
What is the recommended remediation?
Upgrade Dell Container Storage Modules to version 1.18.0 or later.
What is the potential impact of successful exploitation?
Successful exploitation could allow unauthorized access. The provided severity vector also indicates low confidentiality impact and low availability impact, with no integrity impact.