{"id":"CVE-2026-67270","published":"2026-10-06T16:17:09.580","lastModified":"2026-10-09T02:17:04.160","description":"Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials.","cvssScore":8.2,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L","cwes":["CWE-295"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Dell Container Storage Modules (CSM) proxy-server component has a certificate validation flaw that allows adjacent network attackers to potentially steal administrator credentials from storage backends. This vulnerability affects versions prior to 1.18.0 and can lead to unauthorized access to critical storage infrastructure.","exploitability":"Exploitation requires an adjacent network attacker with no authentication prerequisites, making it moderately easy to exploit with a simple network-based attack vector.","blast_radius":"If exploited, this vulnerability could expose administrator credentials for storage backends, potentially allowing attackers to access and manipulate sensitive data stored in Dell CSM environments.","remediation":"Upgrade to version 1.18.0 or later to remediate the certificate validation vulnerability in the proxy-server component.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["certificate-validation","storage","credential-exfiltration","network-attack"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:56:57.480Z"}}