Improper Authorization Vulnerability in IBM Storage Scale Products
CVE-2026-14469

5.4MEDIUM

Key Information:

Vendor

IBM
Status
Storage Scale Container Native And Csi
Vendor
CVE Published:
8 November 2026

What is CVE-2026-14469?

IBM Storage Scale versions 5.2.3.0 through 5.2.3.9 and 6.0.1.0 are susceptible to an improper authorization flaw that permits authenticated attackers to access and manipulate filesets beyond their intended control. This vulnerability poses a significant threat to data integrity and security. Users are advised to review the vendor advisory and apply the necessary patches to mitigate potential risks.

Affected Version(s)

Storage Scale Container Native and CSI 6.0.1.0

Storage Scale Container Native and CSI 5.2.3.0 <= 5.2.3.9

References

https://www.ibm.com/support/pages/node/7291295
vendor-advisorypatch

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.