Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Dell Container Storage Modules (CSM) — dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-securit… Clear all filters
TI-2026-68474 CVE-2026-70411 · GHSA-mv3c-r45j-34f2

Missing authentication in Dell Container Storage Modules

Priority LOW 30

Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService).

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00188 Published 2026-10-06 Fixed in 1.18.0 or later CWE-306
TI-2026-68463 CVE-2026-67270 · GHSA-h6p7-jcc3-8xrx

Improper certificate validation in Dell CSM proxy-server

Priority LOW 36

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component.

CVSS 3.1HIGH 8.2 Adjacent network No auth No interaction EPSS 0.00079 Published 2026-10-06 Fixed in 1.18.0 or later CWE-295
TI-2026-68461 CVE-2026-67269 · GHSA-fwc4-f52f-hjhh

Privilege escalation in Dell CSM Operator gives root on cluster nodes

Priority MEDIUM 43

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00334 Published 2026-10-06 Fixed in 1.18.0 or later CWE-269