Vulnerabilidades do Dell Container Storage Modules

CVE-2026-76105 Alta · 7.7 CWE-330 06/10/2026

Use of Insufficiently Random Values em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

CVE-2026-67273 Crítica · 9.6 CWE-1336 06/10/2026

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper…

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-63691 Média · 6.1 CWE-862 06/10/2026

Missing Authorization em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.

CVE-2026-63690 Média · 5.4 CWE-306 06/10/2026

Missing Authentication for Critical Function em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-63689 Média · 6.5 CWE-532 06/10/2026

Insertion of Sensitive Information into Log File em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-61411 Alta · 7.7 CWE-532 06/10/2026

Insertion of Sensitive Information into Log File em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVE-2026-67269 Crítica · 9.9 CWE-269 06/10/2026

Improper Privilege Management em Dell Container Storage Modules

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

CVE-2026-63692 Crítica · 10.0 CWE-306 06/10/2026

Missing Authentication for Critical Function em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-63688 Crítica · 10.0 CWE-306 06/10/2026

Missing Authentication for Critical Function em Dell Container Storage Modules

Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.

CVE-2026-61421 Crítica · 9.8 CWE-798 06/10/2026

Use of Hard-coded Credentials em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

CVE-2026-54472 Alta · 7.5 CWE-798 06/10/2026

Use of Hard-coded Credentials em Dell Container Storage Modules

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

CVE-2026-40711 Alta · 8.0 CWE-78 26/06/2026

OS Command Injection em Dell Container Storage Modules

Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.