Dashboard / CVE-2026-14437

CVE-2026-14437

MEDIUM
MEDIUM Priority: 0.03 BB Relevance: 63/100
Published: 2026-11-08 Modified: 2026-11-09 First seen: 2026-11-08 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: None
A: None

Description

IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
IBM Storage Scale Container Native and CSI 6.0.1.0
IBM Storage Scale Container Native and CSI 5.2.3.0
IBM Storage Scale Container Native and CSI 6.0.1.0
IBM Storage Scale Container Native and CSI 5.2.3.0

References & Advisories (1)

Bug Bounty Relevance

63 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

6.5 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.49%
Raw Score 0.004870
Percentile 42.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00487
2026-11-12
0.00487
2026-11-10
0.00487
2026-11-09
0.00487

Intelligence Sources

mitre ref →
nvd ref →

External Links