Dell Container Storage Modules
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Dell Container Storage Modules.
By the Year
In 2026 there have been 14 vulnerabilities in Dell Container Storage Modules with an average score of 8.3 out of ten. Container Storage Modules did not have any published security vulnerabilities last year. That is, 14 more vulnerabilities have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 14 | 8.27 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 4 | 8.23 |
It may take a day or so for new Container Storage Modules vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Dell Container Storage Modules Security Vulnerabilities
Dell CS Modules <1.18.0 Missing Auth in csi-powerflex/Powermax/PowerStore
CVE-2026-63690
5.4 - Medium
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure.
Missing Authentication for Critical Function
Dell CSI Driver for PowerMax csireverseproxy Missing Auth <1.18.0
CVE-2026-63691
6.1 - Medium
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access.
AuthZ
Dell Container Storage Modules 1.17. Sensitive Info Log Injection
CVE-2026-63689
6.5 - Medium
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Insertion of Sensitive Information into Log File
Dell CSM <1.18 Unauthenticated gRPC TenantService Attacker Enables Tenant Creation
CVE-2026-70411
7.1 - High
- October 06, 2026
Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.
Missing Authentication for Critical Function
Dell Container Storage Modules <1.18.0 Log File Sensitive Info Leak
CVE-2026-61411
7.7 - High
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Insertion of Sensitive Information into Log File
Dell CMS <1.18 Insufficiently Random Values Vulnerability (CVE-2026-76105)
CVE-2026-76105
7.7 - High
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Use of Insufficiently Random Values
Dell CSM Proxy-Server Improper Cert Validation before v1.18.0
CVE-2026-67270
8.2 - High
- October 06, 2026
Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials.
Improper Certificate Validation
Dell Container Storage Mod v1.17+ - Template Engine Neutralization (EoP)
CVE-2026-67273
9.6 - Critical
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
1336
Use of Hardcoded Credentials in Dell CSM Auth (v<1.18.0) Elevating Privileges
CVE-2026-61421
9.8 - Critical
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Use of Hard-coded Credentials
Dell Container Storage Modules <1.18.0 Use of Hard-coded Credentials in csm-docs
CVE-2026-54472
9.8 - Critical
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.9.8
Use of Hard-coded Credentials
Dell CSM Operator <1.18.0 Improper Privilege Management CVE-2026-67269
CVE-2026-67269
9.9 - Critical
- October 06, 2026
Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.
Improper Privilege Management
Dell Container Storage Modules <1.18.0: Missing Auth -> Priv Esc
CVE-2026-63692
10 - Critical
- October 06, 2026
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Missing Authentication for Critical Function
Dell CSM <1.18.0 Missing Auth in csm-authorization-storage gRPC
CVE-2026-63688
10 - Critical
- October 06, 2026
Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend administrator credentials for all registered storage arrays.
Missing Authentication for Critical Function
OS Command Injection in Dell Container Storage Modules v2.16.0 (csi-*)
CVE-2026-40711
8 - High
- June 26, 2026
Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Shell injection
Dell CNS 1.2: Pathname Limiting Flaw in GoISCsi/Gobrick OS Command Exec
CVE-2022-34426
8.8 - High
- October 11, 2022
Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory.
Directory traversal
Dell CM 1.2 OS Command Injection in goiscsi/gobrick
CVE-2022-34427
8.8 - High
- October 11, 2022
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of intended OS command execution.
Shell injection
Dell Container Storage Modules 1.2 Path Traversal in goiscsi/gobrick
CVE-2022-34375
6.5 - Medium
- August 30, 2022
Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to unintentional access to path outside of restricted directory.
Directory traversal
Dell Container Storage Modules 1.2: OS Command Injection in GoISCsi/Gobrick
CVE-2022-34374
8.8 - High
- August 30, 2022
Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to to execute arbitrary OS commands on the affected system.
Shell injection
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Dell Container Storage Modules or by Dell? Click the Watch button to subscribe.
