Veille CVE

Jeudi 8 octobre 2026

4 CVE

  1. CVE-2026-67269 9.9 Critique

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

  2. CVE-2026-54472 7.5 Élevée

    Dell Container Storage Modules

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8

  3. CVE-2026-61421 9.8 Critique

    Dell Container Storage Modules

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  4. CVE-2026-63688 10.0 Critique

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.