Dell Container Storage Modules vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Dell Container Storage Modules: 12 record(s), with affected versions and fixes.cpe:2.3:a:dell:container_storage_modules
CVE-2026-76105
High · 7.7
CWE-330 Oct 6, 2026
Use of Insufficiently Random Values in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2026-67273
Critical · 9.6
CWE-1336 Oct 6, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper…
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-63691
Medium · 6.1
CWE-862 Oct 6, 2026
Missing Authorization in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.
CVE-2026-63690
Medium · 5.4
CWE-306 Oct 6, 2026
Missing Authentication for Critical Function in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-63689
Medium · 6.5
CWE-532 Oct 6, 2026
Insertion of Sensitive Information into Log File in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-61411
High · 7.7
CWE-532 Oct 6, 2026
Insertion of Sensitive Information into Log File in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2026-67269
Critical · 9.9
CWE-269 Oct 6, 2026
Improper Privilege Management in Dell Container Storage Modules
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.
CVE-2026-63692
Critical · 10.0
CWE-306 Oct 6, 2026
Missing Authentication for Critical Function in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-63688
Critical · 10.0
CWE-306 Oct 6, 2026
Missing Authentication for Critical Function in Dell Container Storage Modules
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.
CVE-2026-61421
Critical · 9.8
CWE-798 Oct 6, 2026
Use of Hard-coded Credentials in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
CVE-2026-54472
High · 7.5
CWE-798 Oct 6, 2026
Use of Hard-coded Credentials in Dell Container Storage Modules
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8
CVE-2026-40711
High · 8.0
CWE-78 Jun 26, 2026
OS Command Injection in Dell Container Storage Modules
Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.