Dell Container Storage Modules vulnerabilities

16 CVEs affecting Dell Container Storage Modules, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-76105, published 2026-10-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-34427, published 2022-10-11. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of…
CVE-2022-34426, published 2022-10-11. High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days. Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote…
CVE-2022-34374, published 2022-08-30. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability…
CVE-2026-40711, published 2026-06-26. High severity, CVSS 8.0. EPSS: 1.3% chance of exploitation in the next 30 days. Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used…
CVE-2022-34375, published 2022-08-30. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability…
CVE-2026-63688, published 2026-10-06. Critical severity, CVSS 10.0. EPSS: 0.8% chance of exploitation in the next 30 days. Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated…
CVE-2026-63692, published 2026-10-06. Critical severity, CVSS 10.0. EPSS: 0.6% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially…
CVE-2026-67269, published 2026-10-06. Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low…
CVE-2026-54472, published 2026-10-06. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially…
CVE-2026-67273, published 2026-10-06. Critical severity, CVSS 9.6. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote…

Latest

CVE-2026-76105, published 2026-10-06. High severity, CVSS 7.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this…
CVE-2026-63691, published 2026-10-06. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with…
CVE-2026-63690, published 2026-10-06. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An…
CVE-2026-63689, published 2026-10-06. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially…
CVE-2026-61411, published 2026-10-06. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially…
CVE-2026-61421, published 2026-10-06. Critical severity, CVSS 9.8. EPSS: 0.3% chance of exploitation in the next 30 days. Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could…