<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 03 Oct 2026 01:58:46 +0000</lastBuildDate>
    <item>
      <title>95fa5334-3bc5-4a02-b162-f13d68c1335d</title>
      <link>https://vulnerability.circl.lu/sighting/95fa5334-3bc5-4a02-b162-f13d68c1335d/export</link>
      <description>{"uuid": "95fa5334-3bc5-4a02-b162-f13d68c1335d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwwjj46hgq2j", "content": "\ud83e\udd16 Dell CSM: 6 critical flaws incl. CVE-2026-63688 (CVSS 10.0). Missing auth \u2192 unauthenticated theft of storage admin credentials; hardcoded JWT signing keys. Fixed in 1.18.0, no workaround.\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:26:55.220925Z"}</description>
      <content:encoded>{"uuid": "95fa5334-3bc5-4a02-b162-f13d68c1335d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwwjj46hgq2j", "content": "\ud83e\udd16 Dell CSM: 6 critical flaws incl. CVE-2026-63688 (CVSS 10.0). Missing auth \u2192 unauthenticated theft of storage admin credentials; hardcoded JWT signing keys. Fixed in 1.18.0, no workaround.\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:26:55.220925Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/95fa5334-3bc5-4a02-b162-f13d68c1335d/export</guid>
      <pubDate>Fri, 02 Oct 2026 23:26:55 +0000</pubDate>
    </item>
    <item>
      <title>d1206f85-42e4-4414-8219-ae84ac1b2b5d</title>
      <link>https://vulnerability.circl.lu/sighting/d1206f85-42e4-4414-8219-ae84ac1b2b5d/export</link>
      <description>{"uuid": "d1206f85-42e4-4414-8219-ae84ac1b2b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://t.me/VulnerabilityNews/44739", "content": "Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes\n\nDell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for critical function vulnerability in the csm-authorization-storage gRPC server that an\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:00:53.000000Z"}</description>
      <content:encoded>{"uuid": "d1206f85-42e4-4414-8219-ae84ac1b2b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://t.me/VulnerabilityNews/44739", "content": "Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes\n\nDell has released security updates to address multiple critical security flaws in Dell Container Storage Modules (CSM) that could be exploited by bad actors to take over susceptible systems.\n\nThe vulnerabilities are listed below -\n\n\n  CVE-2026-63688 (CVSS score: 10.0) - A missing authentication for critical function vulnerability in the csm-authorization-storage gRPC server that an\nhttps://thehackernews.com/2026/10/dell-csm-flaws-enable-unauthenticated.html", "creation_timestamp": "2026-10-02T23:00:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d1206f85-42e4-4414-8219-ae84ac1b2b5d/export</guid>
      <pubDate>Fri, 02 Oct 2026 23:00:53 +0000</pubDate>
    </item>
    <item>
      <title>a4640fe8-4e2a-4b53-867f-ca337300d2ee</title>
      <link>https://vulnerability.circl.lu/sighting/a4640fe8-4e2a-4b53-867f-ca337300d2ee/export</link>
      <description>{"uuid": "a4640fe8-4e2a-4b53-867f-ca337300d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwvr2auf532u", "content": "Dell CSM flaws CVE-2026-63688 and CVE-2026-63692, both max severity, let unauthenticated attackers take storage admin credentials for every connected array. Upgrade CSM to 1.18.0 or later and rotate those credentials. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-02T16:09:07.141329Z"}</description>
      <content:encoded>{"uuid": "a4640fe8-4e2a-4b53-867f-ca337300d2ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwvr2auf532u", "content": "Dell CSM flaws CVE-2026-63688 and CVE-2026-63692, both max severity, let unauthenticated attackers take storage admin credentials for every connected array. Upgrade CSM to 1.18.0 or later and rotate those credentials. https://cti.securitycyber.uk", "creation_timestamp": "2026-10-02T16:09:07.141329Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a4640fe8-4e2a-4b53-867f-ca337300d2ee/export</guid>
      <pubDate>Fri, 02 Oct 2026 16:09:07 +0000</pubDate>
    </item>
    <item>
      <title>2a6723ff-c083-4efa-bd56-8bc7a174ef2b</title>
      <link>https://vulnerability.circl.lu/sighting/2a6723ff-c083-4efa-bd56-8bc7a174ef2b/export</link>
      <description>{"uuid": "2a6723ff-c083-4efa-bd56-8bc7a174ef2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwvo7jgywu2k", "content": "\ud83e\udd16 Dell CSM Authorization v2.4.0: two CVSS 10.0 flaws. Missing auth lets unauthenticated attackers gain full admin control of Dell storage across all tenants. CVE-2026-63688 / CVE-2026-63692\nhttps://www.dell.com/support/kbdoc/en-us/000515771", "creation_timestamp": "2026-10-02T15:18:22.580712Z"}</description>
      <content:encoded>{"uuid": "2a6723ff-c083-4efa-bd56-8bc7a174ef2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mwvo7jgywu2k", "content": "\ud83e\udd16 Dell CSM Authorization v2.4.0: two CVSS 10.0 flaws. Missing auth lets unauthenticated attackers gain full admin control of Dell storage across all tenants. CVE-2026-63688 / CVE-2026-63692\nhttps://www.dell.com/support/kbdoc/en-us/000515771", "creation_timestamp": "2026-10-02T15:18:22.580712Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2a6723ff-c083-4efa-bd56-8bc7a174ef2b/export</guid>
      <pubDate>Fri, 02 Oct 2026 15:18:22 +0000</pubDate>
    </item>
    <item>
      <title>843a9461-4123-4961-9c88-92694ad6c6c1</title>
      <link>https://vulnerability.circl.lu/sighting/843a9461-4123-4961-9c88-92694ad6c6c1/export</link>
      <description>{"uuid": "843a9461-4123-4961-9c88-92694ad6c6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwuogk3add2e", "content": "CVE-2026-63688 is trending. Hype score 4, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 4\n\nhttps://cvemon.intruder.io/cves/CVE-2026-63688", "creation_timestamp": "2026-10-02T05:49:38.554600Z"}</description>
      <content:encoded>{"uuid": "843a9461-4123-4961-9c88-92694ad6c6c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mwuogk3add2e", "content": "CVE-2026-63688 is trending. Hype score 4, currently #5 on cvemon.\n\nCurrently trending CVE - Hype Score: 4\n\nhttps://cvemon.intruder.io/cves/CVE-2026-63688", "creation_timestamp": "2026-10-02T05:49:38.554600Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/843a9461-4123-4961-9c88-92694ad6c6c1/export</guid>
      <pubDate>Fri, 02 Oct 2026 05:49:38 +0000</pubDate>
    </item>
    <item>
      <title>81c757a1-d4aa-4c56-aaa3-130f1d69181c</title>
      <link>https://vulnerability.circl.lu/sighting/81c757a1-d4aa-4c56-aaa3-130f1d69181c/export</link>
      <description>{"uuid": "81c757a1-d4aa-4c56-aaa3-130f1d69181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwuaikjzid2q", "content": "Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 (CVSS 10) allow admin takeover. Upgrade to 1.18.0.\n\n#Dell #ContainerStorageModules #CVE202663688 #CVE202663692 #CVE202667269 #Kubernetes #StorageSecurity", "creation_timestamp": "2026-10-02T01:40:14.002137Z"}</description>
      <content:encoded>{"uuid": "81c757a1-d4aa-4c56-aaa3-130f1d69181c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63688", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mwuaikjzid2q", "content": "Dell Container Storage Modules vulnerabilities CVE-2026-63688 and CVE-2026-63692 (CVSS 10) allow admin takeover. Upgrade to 1.18.0.\n\n#Dell #ContainerStorageModules #CVE202663688 #CVE202663692 #CVE202667269 #Kubernetes #StorageSecurity", "creation_timestamp": "2026-10-02T01:40:14.002137Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/81c757a1-d4aa-4c56-aaa3-130f1d69181c/export</guid>
      <pubDate>Fri, 02 Oct 2026 01:40:14 +0000</pubDate>
    </item>
  </channel>
</rss>
