CVE-2026-70411

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

EUVD-2026-93461

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-70411

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability within the csm-authorization-tenant gRPC service (TenantService) . An unauthenticated attacker positioned on an adjacent network could exploit this flaw to ...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-61421

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-61421

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Use of Hard-coded Cryptographic Key (CWE-798) in the karavi-authorization component's JWT authentication. An unauthenticated remote attacker who knows the publicly available signing secret can forge authentication t...

EUVD-2026-93437

Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-63688

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

CVE-2026-63688

Dell Container Storage Modules (CSM) versions prior to v1.18.0 are vulnerable to a Missing Authentication for Critical Function flaw in the csm-authorization-storage gRPC server . An unauthenticated remote attacker can exploit this to gain unauthorized access to storage backend administrator cred...

EUVD-2026-93428

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

PT-2026-104555

🚨 DELL CONTAINER STORAGE MODULES — UNAUTHENTICATED CVSS 10.00 DSA-2026-448 Dell Security Advisory DSA-2026-448, revision 1.0, dated 1 Oct 2026, covers multiple vulnerabilities in Dell Container Storage Modules. Article 000515771. Impact: Critical. Unauthenticated missing authentication, CVSS 10.0...

PT-2026-104558

🚨 DELL CONTAINER STORAGE MODULES — UNAUTHENTICATED CVSS 10.00 DSA-2026-448 Dell Security Advisory DSA-2026-448, revision 1.0, dated 1 Oct 2026, covers multiple vulnerabilities in Dell Container Storage Modules. Article 000515771. Impact: Critical. Unauthenticated missing authentication, CVSS 10.0...

PT-2026-104556

🚨 DELL CONTAINER STORAGE MODULES — UNAUTHENTICATED CVSS 10.00 DSA-2026-448 Dell Security Advisory DSA-2026-448, revision 1.0, dated 1 Oct 2026, covers multiple vulnerabilities in Dell Container Storage Modules. Article 000515771. Impact: Critical. Unauthenticated missing authentication, CVSS 10.0...

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell has released security updates to address multiple critical security flaws in Dell Container Storage Modules CSM that could be exploited by bad actors to take over susceptible systems. The vulnerabilities are listed below - CVE-2026-63688 CVSS score: 10.0 - A missing authentication for critic...

PT-2026-104448

Two critical vulnerabilities in Dell Container Storage Modules CSM allow unauthenticated attackers to gain admin access and compromise Kubernetes worker nodes. Patches are available now. Technical Breakdown - CVE-2026-63688 CVSS 10.0: Missing authentication in the csm-authorization-storage gRPC...