MajorCritical vulnerability

CVE-2026-67270 (CVSS 8.2)

NVD · officialPublished Oct 6, 2026Risk 37/100

Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials.

Technical details

CVSS

8.2

AV:Adjacent NetworkAC:HighPR:NoneUI:NoneC:HighI:HighA:Low

Evidence and sources

This record is attributed to NVD. Exploitation status and remediation guidance are kept separate from the vulnerability's technical severity.

Open primary source