CVE-2026-67269

Critical9.9 Published on Oct 6, 2026

Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privileges and gaining root-level access on cluster nodes.

CVSS score9.9 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness type (CWE)CWE-269

Vendorsdell

Affected products

Vendors	Product	Versions
dell	container storage modules	< 1.18.0

Vulnerabilities

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

FortiMail path traversal and NetScaler SAML flaw under active exploit join CISA KEV, forcing urgent patching plus PHP, PaperCut and Spectre fixes.

Oct 5, 202619:36 7 min readRead

Vulnerabilities

Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes

Dell patched six critical CSM flaws, including two CVSS 10.0 bugs enabling credential theft, token forgery, tenant takeover and Kubernetes root access.

Oct 2, 202619:59 6 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

FortiMail and NetScaler Exploitation Drives an Urgent Enterprise Patch Cycle

Six Dell CSM Flaws Expose Storage Credentials, Tenant Controls, and Kubernetes Nodes