{"id":"CVE-2026-67273","published":"2026-10-06T16:17:09.717","lastModified":"2026-10-08T18:18:04.513","description":"Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","cwes":["CWE-1336"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This vulnerability allows a low-privileged attacker to exploit an Improper Neutralization of Special Elements Used in a Template Engine flaw, potentially leading to Elevation of Privileges.","exploitability":"Exploitation requires remote access and a low-privileged attacker. The vulnerability is relatively easy to exploit given the attacker's access level.","blast_radius":"If exploited, the attacker could gain higher privileges, potentially leading to full system compromise.","remediation":"Upgrade to version 1.18.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","priv-escalation","template-engine","web","storage"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-07T08:43:40.635Z"}}