CVE-2026-63688

Dell Container Storage Modules (CSM) versions prior to v1.18.0 are vulnerable to a Missing Authentication for Critical Function flaw in the csm-authorization-storage gRPC server . An unauthenticated remote attacker can exploit this to gain unauthorized access to storage backend administrator cred...

CVE-2026-63692

Dell Container Storage Modules (CSM) , versions prior to 1.18.0 , are vulnerable to a Missing Authentication for Critical Function flaw (CVE-2026-63692 ). This vulnerability exists in the authorization proxy and tenant service , allowing an unauthenticated network attacker to bypass authenticatio...

CVE-2026-67269

The Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 , contains an Improper Privilege Management vulnerability (CWE-269) within the ContainerStorageModule Custom Resource reconciler . A low-privileged remote attacker could exploit this flaw to escalate privileges and gain r...

CVE-2022-34427

CVE-2022-34427 affects Dell Container Storage Modules 1.2, with an OS command injection in the goiscsi and gobrick libraries. The root cause is a vulnerability that allows a remote unauthenticated attacker to modify intended OS commands, potentially leading to arbitrary command execution. Public ...

CVE-2022-34374

CVE-2022-34374 affects Dell Container Storage Modules (version 1.2). The vulnerability is an OS command injection in the goiscsi and gobrick libraries, caused by improper handling/validation of constructed commands. A remote authenticated attacker with low privileges could exploit this to execute...

CVE-2022-34426

Dell Container Storage Modules 1.2 is affected by CVE-2022-34426 due to an Improper Limitation of a Pathname to a Restricted Directory in the goiscsi and gobrick libraries, which could allow a remote unauthenticated attacker to perform OS command injection and obtain unintended access to paths ou...

CVE-2022-34375

Summary: Dell Container Storage Modules 1.2 contains a path traversal vulnerability in the goiscsi and gobrick libraries. A remote authenticated attacker with low privileges could exploit this to gain unintentional access to paths outside of restricted directories. What’s affected: Dell Container...

CVE-2026-54472

Dell Container Storage Modules (CSM) , versions prior to 1.18.0 , are vulnerable to a hard-coded credentials flaw in the CSM Authorization module (specifically csm-docs ). An unauthenticated remote attacker can exploit this to forge cryptographically valid administrative tokens, enabling unauthor...

CVE-2026-61421

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Use of Hard-coded Cryptographic Key (CWE-798) in the karavi-authorization component's JWT authentication. An unauthenticated remote attacker who knows the publicly available signing secret can forge authentication t...

CVE-2026-67273

Dell Container Storage Modules (CSM) , versions prior to 1.18.0 , are vulnerable to an Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336). A low-privileged attacker with remote access can exploit this flaw to achieve Elevation of Privileges , access sensitive informa...

CVE-2026-76105

Dell Container Storage Modules , versions prior to 1.18.0 , are vulnerable to an Use of Insufficiently Random Values vulnerability (CWE-330). An unauthenticated attacker with local access could exploit this flaw, potentially leading to information tampering . The impact includes high integrity an...

CVE-2026-61411

Dell Container Storage Modules versions prior to 1.18.0 are vulnerable to an Insertion of Sensitive Information into Log File vulnerability (CWE-532). A low-privileged attacker with remote access could exploit this to cause Information disclosure . The affected software is used to integrate Dell ...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0 , are susceptible to a Missing Authorization vulnerability within the Dell CSI Driver for PowerMax in the csireverseproxy component. An unauthenticated attacker with adjacent network access could exploit this flaw to gain Unauthorized acces...

CVE-2026-63690

Dell Container Storage Modules , versions prior to 1.18.0 , are affected by a Missing Authentication for Critical Function vulnerability (CWE-306) within the csi-powerflex , csi-powermax , and csi-powerstore components. An unauthenticated attacker with adjacent network access could exploit this f...

CVE-2026-67270

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are affected by an Improper Certificate Validation vulnerability within the proxy-server component. An unauthenticated attacker located on an adjacent network could exploit this flaw to cause information exposure of storage backend adm...

CVE-2026-63689

Dell Container Storage Modules (CSM) , versions prior to 1.18.0, are vulnerable to an Insertion of Sensitive Information into Log File (CWE-532). A low privileged attacker with remote access could exploit this to cause Information disclosure . While some reports describe related vulnerabilities i...

CVE-2026-70411

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability within the csm-authorization-tenant gRPC service (TenantService) . An unauthenticated attacker positioned on an adjacent network could exploit this flaw to ...