{"id":"CVE-2026-76052","kind":"vulnerability","aliases":["CVE-2026-76052"],"related":[],"title":"IBM Storage Scale: undocumented flag opens unauthenticated REST API path","description":"IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through 6.0.1.0, and 5.2.3.0 through 5.2.3.8 could allow an attacker to leverage an undocumented flag to gain access to an unauthenticated path in the REST API.","summary":"IBM Storage Scale and Storage Scale System releases contain an undocumented flag that exposes an unauthenticated path in the REST API. An attacker who reaches the API can use that path without logging in.","severity":"medium","cvss":6.0,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ibm-storage-scale","ibm-storage-scale-system","infrastructure","rest-api","self-hosted"],"not_affected_if":["outside-affected-ranges"],"how_to_check":"- Check the installed IBM Storage Scale or Storage Scale System version against the affected ranges in the description (5.2.3.0 through 5.2.3.8, 6.0.0.0 through 6.0.1.0, 6.2.3.0 through 6.2.3.6, 7.0.0.0 through 7.0.1.0).","fix":null,"status":"open","published_at":"2026-11-08T18:17:04+00:00","first_seen_at":"2026-11-08T18:22:22+00:00","triaged_at":"2026-11-08T18:22:49+00:00","updated_at":"2026-11-08T18:22:49+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-08T18:22:49Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"IBM Storage Scale: undocumented flag opens unauthenticated REST API path","impact":"medium","summary":"IBM Storage Scale and Storage Scale System releases contain an undocumented flag that exposes an unauthenticated path in the REST API. An attacker who reaches the API can use that path without logging in.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["ibm-storage-scale","ibm-storage-scale-system","rest-api","self-hosted"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker reaches REST API functions without authentication","analyst_note":"Check the IBM security bulletin for the affected products and fixed versions, and whether the undocumented flag is on by default.","how_to_check":"- Check the installed IBM Storage Scale or Storage Scale System version against the affected ranges in the description (5.2.3.0 through 5.2.3.8, 6.0.0.0 through 6.0.1.0, 6.2.3.0 through 6.2.3.6, 7.0.0.0 through 7.0.1.0).\n- unknown for whether the undocumented flag is enabled on a given system; the sources do not say how to find it.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["outside-affected-ranges"],"who_is_affected":"Organizations running the affected IBM Storage Scale or Storage Scale System releases with the REST API reachable on their network. The sources do not say whether the flag is enabled by default, so exposure is unknown; systems on other versions are not in the stated ranges.","user_interaction":"no","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000766,"input_tokens":4621,"output_tokens":607,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-76052':13A,16A '5.2.3.0':85C '5.2.3.8':87C '6.0.0.0':81C '6.0.1.0':83C '6.2.3.0':70C '6.2.3.6':72C '7.0.0.0':74C '7.0.1.0':76C 'access':99C 'allow':89C 'api':9A,29B,53B,59B,107C 'attack':55B,91C 'contain':41B 'could':88C 'cve':11A,14A 'expos':46B 'flag':5A,44B,96C 'gain':98C 'host':32B 'ibm':1A,18B,22B,33B,66C,78C 'ibm-storage-scal':17B 'ibm-storage-scale-system':21B 'infrastructur':26B 'leverag':93C 'log':65B 'open':6A 'path':10A,49B,63B,103C 'reach':57B 'releas':40B 'rest':8A,28B,52B,106C 'rest-api':27B 'scale':3A,20B,24B,35B,38B,68C,80C 'self':31B 'self-host':30B 'storag':2A,19B,23B,34B,37B,67C,79C 'system':25B,39B,69C 'unauthent':7A,48B,102C 'undocu':4A,43B,95C 'use':61B 'without':64B","nicknames":[],"mitigations":[],"who_affected":"Organizations running the affected IBM Storage Scale or Storage Scale System releases with the REST API reachable on their network. The sources do not say whether the flag is enabled by default, so exposure is unknown; systems on other versions are not in the stated ranges.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["ibmstoragescale","ibmstoragescalesystem","infrastructure","medium","restapi","selfhosted"],"campaign_type":null,"search_a":"'-2026':12A,15A '-76052':13A,16A 'api':9A 'cve':11A,14A 'flag':5A 'ibm':1A 'open':6A 'path':10A 'rest':8A 'scale':3A 'storag':2A 'unauthent':7A 'undocu':4A","search_b":"'api':29B,53B,59B 'attack':55B 'contain':41B 'expos':46B 'flag':44B 'host':32B 'ibm':18B,22B,33B 'ibm-storage-scal':17B 'ibm-storage-scale-system':21B 'infrastructur':26B 'log':65B 'path':49B,63B 'reach':57B 'releas':40B 'rest':28B,52B 'rest-api':27B 'scale':20B,24B,35B,38B 'self':31B 'self-host':30B 'storag':19B,23B,34B,37B 'system':25B,39B 'unauthent':48B 'undocu':43B 'use':61B 'without':64B","search_c":"'5.2.3.0':85C '5.2.3.8':87C '6.0.0.0':81C '6.0.1.0':83C '6.2.3.0':70C '6.2.3.6':72C '7.0.0.0':74C '7.0.1.0':76C 'access':99C 'allow':89C 'api':107C 'attack':91C 'could':88C 'flag':96C 'gain':98C 'ibm':66C,78C 'leverag':93C 'path':103C 'rest':106C 'scale':68C,80C 'storag':67C,79C 'system':69C 'unauthent':102C 'undocu':95C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-08T18:17:04+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","cvss_by":"psirt@us.ibm.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-76052","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-76052","severity":null,"published_at":"2026-11-08T18:17:04+00:00","modified_at":"2026-11-08T18:17:04+00:00","first_seen_at":"2026-11-08T18:22:22+00:00","fetched_at":"2026-11-08T18:22:22+00:00","note":null}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}