[dell]

October 3, 2026

• Dell Container Storage Modules carry two CVSS 10.0 unauthenticated flaws with no workarounds. CVE-2026-63688 is missing authentication on the csm-authorization-storage gRPC server, exposing storage-backend admin credentials for every registered array across all five supported Dell storage families; CVE-2026-63692 bypasses the authorization proxy and tenant service entirely. Also fixed: CVE-2026-67269 (CVSS 9.9, privilege escalation to root on cluster nodes via the CSM reconciler), CVE-2026-54472 and CVE-2026-61421 (hard-coded credentials and a hard-coded JWT signing key allowing forged admin tokens) (The Hacker News, Dell DSA-2026-448). · Cloud, Identity & Supply Chain

in NetScaler Round Two: Patched Appliances Crashing Again as a New SAML Bug Gets Reproduced

July 13, 2026

• Dell BIOS passwords can be recovered from SPI flash (CVE-2026-40639) due to reversible XOR "encryption," enabling fast recovery of short passwords and partial recovery of longer ones — full BIOS control on physical access (AmberWolf). · Vulnerabilities & Exploits

in Russian Intelligence Turns IP Cameras and Routers Into a NATO Surveillance Grid