Dsa 2026 448 Security Update For Dell Container Storage Modules Multiple Vulnerabilities

www.dell.com • October 6, 2026

Summary: Dell Container Storage Modules remediation is available for multiple vulnerabilities that could be exploited by malicious users to compromise the affected system.

Third-party Component CVEs More Information golang.org/x/crypto CVE-2024-45337, CVE-2025-22869, CVE-2025-47913, CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, CVE-2026-39835, CVE-2026-42508, CVE-2026-46595, CVE-2026-46597, CVE-2026-46598 github.com/golang-jwt/jwt/v4 , google.golang.org/protobuf CVE-2024-51744, CVE-2025-30204, CVE-2024-24786 golang.org/x/net CVE-2026-39821, CVE-2026-33814, CVE-2026-25680, CVE-2025-22870, CVE-2025-22872

Affected Products & Remediation

Revision Date Description 1.0 2026-10-01 Initial Release 2.0 2026-10-05 Updated Proprietary Code Table. Updated the versions for the descriptions. Additionally, added researcher acknowledgements. 3.0 2026-10-06 Updated Affected Products and Remediation section: Updated Link

CVE-2026-63688, CVE-2026-63692, CVE-2026-67270, CVE-2026-61411, CVE-2026-63689, CVE-2026-63691, CVE-2026-63690: Dell would like to thank chwrld for reporting these issues. CVE-2026-67269: Dell would like to thank SuperDevSecurity for reporting this issue. CVE-2026-54472: Dell would like to thank lolsaiii for reporting this issue. CVE-2026-61421: Dell would like to thank heyysaiii for reporting this issue. CVE-2026-67273: Dell would like to thank rudra_16 for reporting this issue.

CVE-2026-63688, CVE-2026-63692, CVE-2026-67270, CVE-2026-61411, CVE-2026-63689, CVE-2026-63691, CVE-2026-63690: Dell would like to thank chwrld for reporting these issues.

CVE-2026-67269: Dell would like to thank SuperDevSecurity for reporting this issue.

CVE-2026-54472: Dell would like to thank lolsaiii for reporting this issue.

CVE-2026-61421: Dell would like to thank heyysaiii for reporting this issue.

CVE-2026-67273: Dell would like to thank rudra_16 for reporting this issue.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Dell CSM Vulnerabilities Allow Remote Admin Access to Kubernetes Dell has disclosed multiple vulnerabilities in its Container Storage Modules (CSM) affecting Kubernetes environments. The most severe flaws, with a CVSS score of 10.0, enable unauthenticated remote attackers to gain full administrative control over storage infrastructure. These vulnerabilities include CVE-2026-63688 and CVE-2026-63692, both allowing attackers to bypass authentication and access backend credentials. Other significant vulnerabilities include CVE-2026-67269, CVE-2026-54472, and CVE-2026-61421, which also pose serious risks to Kubernetes clusters. As of October 2026, there is no evidence of public exploitation or proof-of-concept code for these vulnerabilities, but immediate patching is recommended. The affected systems include Dell's PowerStore, PowerScale, PowerFlex, PowerMax, and Unity XT, with all CSM versions prior to 1.18.0 being vulnerable. 8 sources 72

Dsa 2026 448 Security Update For Dell Container Storage Modules Multiple Vulnerabilities

The full story

Extracted Entities

Companies (1)

CVEs (24)

Domains (2)