Veille CVE

Mardi 6 octobre 2026

2 CVE sur 13

  1. CVE-2026-70411 6.5 Moyenne

    Dell Container Storage Modules (CSM) · Dell container storage modules

    Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.

  2. CVE-2026-63689 6.5 Moyenne

    Dell Container Storage Modules

    Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.