CVE-2026-67273: Critical severity Dell Container Storage Modules vulnerability
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Container Storage Modulesto a version that resolves this vulnerability.Fixed in 1.18.0
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Container Storage Modules versions earlier than 1.18.0 are affected. The provided information does not identify specific modules, platforms, or configurations within those versions.
What access does an attacker need?
An attacker needs remote access and low-privileged access. No user interaction is required according to the supplied vector.
What is the impact of successful exploitation?
Successful exploitation could allow elevation of privileges. The CVSS vector indicates high confidentiality and integrity impact, with no availability impact stated.
What version should be used to remediate this issue?
Upgrade Dell Container Storage Modules to version 1.18.0 or later. The supplied information does not provide a workaround or mitigation for environments that cannot upgrade immediately.