Improper Certificate Validation in Dell Container Storage Modules
CVE-2026-67270

8.2HIGH

Key Information:

Vendor

Dell
Status
Container Storage Modules (csm)
Vendor
CVE Published:
6 October 2026

What is CVE-2026-67270?

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are susceptible to an improper certificate validation vulnerability in the proxy-server component. This security issue allows an unauthenticated attacker within the adjacent network to exploit the flaw, which may result in the exposure of sensitive information, particularly storage backend administrator credentials. Ensuring that systems are updated to the latest version is crucial to mitigate this risk.

Affected Version(s)

Container Storage Modules (CSM) 0 < 1.18.0 or later

References

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dell would like to thank chwrld for reporting these issues.
.