https://vulnerability.circl.lu/sightings/feed 2026-10-03T01:58:44.270302+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/95fa5334-3bc5-4a02-b162-f13d68c1335d/export 2026-10-03T01:58:44.296725+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "95fa5334-3bc5-4a02-b162-f13d68c1335d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwwjj46hgq2j", "content": "\ud83e\udd16 Dell CSM: 6 critical flaws incl. CVE-2026-63688 (CVSS 10.0). Missing auth \u2192 unauthenticated theft of storage admin credentials; hardcoded JWT signing keys. Fixed in 1.18.0, no workaround.\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:26:55.220925Z"} 2026-10-02T23:26:55.220925+00:00 https://vulnerability.circl.lu/sighting/d1206f85-42e4-4414-8219-ae84ac1b2b5d/export 2026-10-03T01:58:44.299041+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d1206f85-42e4-4414-8219-ae84ac1b2b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://t.me/VulnerabilityNews/44739", "content": "Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes\n\nDell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems.\n\nThe vulnerabilities are listed below -\n\n\n CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for critical function vulnerability in the csm-authorization-storage gRPC server that an\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:00:53.000000Z"} 2026-10-02T23:00:53+00:00 https://vulnerability.circl.lu/sighting/a4640fe8-4e2a-4b53-867f-ca337300d2ee/export 2026-10-03T01:58:44.299137+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a4640fe8-4e2a-4b53-867f-ca337300d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwvr2auf532u", "content": "Dell CSM flaws CVE-2026-63688 and CVE-2026-63692, both max severity, let unauthenticated attackers take storage admin credentials for every connected array. Upgrade CSM to 1.18.0 or later and rotate those credentials. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-02T16:09:07.141329Z"} 2026-10-02T16:09:07.141329+00:00 https://vulnerability.circl.lu/sighting/2a6723ff-c083-4efa-bd56-8bc7a174ef2b/export 2026-10-03T01:58:44.299207+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2a6723ff-c083-4efa-bd56-8bc7a174ef2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwvo7jgywu2k", "content": "\ud83e\udd16 Dell CSM Authorization v2.4.0: two CVSS 10.0 flaws. Missing auth lets unauthenticated attackers gain full admin control of Dell storage across all tenants. CVE-2026-63688 / CVE-2026-63692\nhttps://www.dell.com/support/kbdoc/en-us/000515771", "creation_timestamp": "2026-10-02T15:18:22.580712Z"} 2026-10-02T15:18:22.580712+00:00 https://vulnerability.circl.lu/sighting/843a9461-4123-4961-9c88-92694ad6c6c1/export 2026-10-03T01:58:44.299272+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "843a9461-4123-4961-9c88-92694ad6c6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwuogk3add2e", "content": "CVE-2026-63688 is trending. Hype score 4, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 4\n\nhttps://cvemon.intruder.io/cves/CVE-2026-63688", "creation_timestamp": "2026-10-02T05:49:38.554600Z"} 2026-10-02T05:49:38.554600+00:00 https://vulnerability.circl.lu/sighting/81c757a1-d4aa-4c56-aaa3-130f1d69181c/export 2026-10-03T01:58:44.299335+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "81c757a1-d4aa-4c56-aaa3-130f1d69181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwuaikjzid2q", "content": "Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 (CVSS 10) allow admin takeover. Upgrade to 1.18.0.\n\n#Dell #ContainerStorageModules #CVE202663688 #CVE202663692 #CVE202667269 #Kubernetes #StorageSecurity", "creation_timestamp": "2026-10-02T01:40:14.002137Z"} 2026-10-02T01:40:14.002137+00:00