Dell Container Storage Modules (Product): news timeline & CVEs

Related CVEsby mentions

CVE-2026-6369210.0—

Unauthenticated Privilege Escalation in Dell Container Storage Modules (<1.18.0)

published 2d ago· Dell (Dell EMC) Container Storage Modules (CSM)

CVE-2026-6368810.0—

Unauthenticated Credential Theft in Dell Container Storage Modules (CSM) gRPC Server

published 2d ago· Dell Container Storage Modules (CSM) - csm-authorization-storage gRPC server (CSM Authorization module)

CVE-2026-672699.9—

Privilege Escalation to Root on Kubernetes Nodes in Dell CSM Operator

published 2d ago· Dell Container Storage Modules (CSM) Operator

CVE-2026-544727.5—

Hard-Coded Credentials in Dell Container Storage Modules (CSM) csm-docs

published 2d ago· Dell Container Storage Modules (CSM)

CVE-2026-2276910.013%

Hard-coded credentials in Dell RecoverPoint for Virtual Machines allow root OS access

published Feb 17, 2026· Dell RecoverPoint for Virtual Machines (RP4VMs) KEV

CVE-2021-215517.879%

Local Privilege Escalation in Dell dbutil_2_3.sys Driver

published May 4, 2021· Dell dbutil driver (dbutil_2_3.sys) KEV PoC ×2

CVE-2026-614219.8—

Hard-Coded Credentials in Dell Container Storage Modules (CSM) Authorization, pre-1.18.0

published 2d ago· Dell Container Storage Modules (CSM) — CSM Authorization component

CVE-2026-863609.6—

Unauthenticated Path Traversal to Root Code Execution in Dell System Update

published 2d ago· Dell System Update (DSU)

CVE-2026-672739.6—

Template Injection Privilege Escalation in Dell CSM

published 2d ago· Dell Container Storage Modules

CVE-2026-67275.9<1%

Timing Side-Channel in TCG TPM 2.0 Reference Code RSA-OAEP Decryption

published Aug 11, 2026· Trusted Computing Group TPM 2.0 reference code (TCGVRT0011 / VU#431093)

Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes

Dell patched 18 critical CSM and DSU flaws, including two CVSS 10 authentication bypasses, with no known exploitation.

Dell disclosed 18 critical vulnerabilities in Container Storage Modules and Dell System Update that could let attackers bypass authentication, gain root, forge admin tokens, or control storage and Kubernetes clusters. Two flaws, CVE-2026-63688 and CVE-2026-63692, score CVSS 10; others include CVE-2026-67269 (9.9), CVE-2026-54472 (9.8), CVE-2026-6727 (9.6), and path-traversal CVE-2026-86360 (9.6) in DSU. CSM versions before 1.17.0 and DSU before 2.3.0.0 are affected; fixes are CSM 1.18.0 or later and DSU 2.3.0.0 or later, with no workarounds. Dell said it has no evidence of in-the-wild exploitation.

CSO Onlineupdated Oct 6, 12:57 UTC · 2d agofirst Oct 6, 01:25 UTC · 2d agoVulnerability 5 sources CVE-2026-63688 CVE-2026-63692 CVE-2026-67269+3 CVEs2

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes

Dell patched six critical Container Storage Modules flaws, including two unauthenticated CVSS 10.0 bugs.

Dell shipped Container Storage Modules 1.18.0 to fix six critical flaws affecting all CSM versions before 1.17.0, with no workaround other than updating. CVE-2026-63688 and CVE-2026-63692, both CVSS 10.0, let unauthenticated attackers steal storage administrator credentials or take full control of the authorization service. CVE-2026-54472 and CVE-2026-61421 expose hard-coded credentials and a JWT signing key, CVE-2026-67269 can yield root on Kubernetes nodes, and CVE-2026-67273 allows template-engine privilege escalation and RBAC tampering. Dell also advises rotating JWT signing secrets; the advisory does not report exploitation of these bugs.

The Hacker NewsOct 2, 17:02 UTC · 6d agoVulnerability CVE-2026-63688 CVE-2026-63692 CVE-2026-67269+5 CVEs3

Dell Container Storage Modules

Timeline2 articles

Related CVEsby mentions

Appears with

Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes

Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes