DSA-2026-448: Security Update for Dell Container Storage Modules Multiple Vulnerabilities | Dell US

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publisherwww.dell.com

Article IDNo stable ID in source URL

Verified snapshot22 Oct 2026, 02:29 UTC

Linked CVEs13

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2026-63691Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy
CVE-2026-67270Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component
CVE-2026-63692Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability
CVE-2026-67269Dell Container Storage Modules (CSM) Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler
CVE-2026-67273Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability
CVE-2026-70411Dell Container Storage Modules (CSM): Missing Authentication for Critical Function
CVE-2026-54472Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the csm-docs
CVE-2026-76105Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability
CVE-2026-63690Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore
CVE-2026-61411Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability
CVE-2026-63688Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server
CVE-2026-63689Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability
CVE-2026-61421Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Use of Hard-coded Credentials vulnerability in the CSM Authorization

Source and provenance

Original title: DSA-2026-448: Security Update for Dell Container Storage Modules Multiple Vulnerabilities | Dell US. Captured 22 Oct 2026, 02:29 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗