{"id":"CVE-2026-76105","published":"2026-10-06T16:17:10.000","lastModified":"2026-10-06T20:17:29.270","description":"Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.","cvssScore":7.7,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","cwes":["CWE-330"],"vendors":[],"products":[],"references":[{"url":"https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The vulnerability stems from insufficiently random values being used in Dell Container Storage Modules, which could allow an unauthenticated attacker with local access to tamper with information. This poses a risk to data integrity and potentially allows unauthorized modifications to storage configurations or data.","exploitability":"Exploitation requires local access and is moderately difficult, as the attacker must first gain local system access before being able to leverage the insufficient randomness for information tampering.","blast_radius":"If exploited, this vulnerability could lead to unauthorized modifications of storage configurations or data integrity issues across affected Dell Container Storage Modules installations.","remediation":"Upgrade to version 1.18.0 or later to remediate the Use of Insufficiently Random Values vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["storage","randomness","local-access"],"model":"garnet-coder","analyzedAt":"2026-10-15T09:00:43.881Z"}}