poslední zpráva
SPOJENO AI EPSS 0.00 (nejvyšší)
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. [...]
Dell NL FI US
CVE v události 13
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-54472 | 9.8 3.1 · dell | – | 0.00 |
| CVE-2026-61411 | 7.7 3.1 · dell | – | 0.00 |
| CVE-2026-61421 | 9.8 3.1 · dell | – | 0.00 |
| CVE-2026-63688 | 10.0 3.1 · dell | – | 0.00 |
| CVE-2026-63689 | 6.5 3.1 · dell | – | 0.00 |
| CVE-2026-63690 | 5.4 3.1 · dell | – | 0.00 |
| CVE-2026-63691 | 6.1 3.1 · dell | – | 0.00 |
| CVE-2026-63692 | 10.0 3.1 · dell | – | 0.00 |
| CVE-2026-67269 | 9.9 3.1 · dell | – | 0.00 |
| CVE-2026-67270 | 8.2 3.1 · dell | – | 0.00 |
| CVE-2026-67273 | 9.6 3.1 · dell | – | 0.00 |
| CVE-2026-70411 | 7.1 3.1 · dell | – | 0.00 |
| CVE-2026-76105 | 7.7 3.1 · dell | – | 0.00 |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 10.0.
Tahle CVE jsem vytáhl z širšího textu článku: CVE-2021-21551, CVE-2026-22769. Neukazuju u nich proto fakta z katalogů výše, a to preventivně, protože článek se na ně mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 3
-
· NCSC-NL NL
NCSC-2026-0400 [1.00] [M/H] Dell heeft kwetsbaarheden verholpen in Container storage modules
Dell heeft de kwetsbaarheden verholpen in Container Storage Modules versie 1.18.0 en hoger. De kwetsbaarheden bevinden zich in Dell Container Storage Modules (CSM), die worden gebruikt voor de integratie van Dell-opslagsystemen met containerplatformen zoals Kubernetes en OpenShift. De geïdentificeerde kwetsbaarheden omvatten onder meer authenticatie- en autorisatiebypasses, privilege-escalatie, informatielekken en kwetsbaarheden in CSM-componenten en CSI-drivers. Afhankelijk van de specifieke…
-
· zachyceno · NCSC-FI FI
DSA-2026-448: Security Update for Dell Container Storage Modules Multiple Vulnerabilities
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 10.0, CVEs: CVE-2026-63688, CVE-2026-63692, CVE-2026-67269, CVE-2026-54472, CVE-2026-61421, CVE-2026-67273, CVE-2026-67270, CVE-2026-76105, CVE-2026-61411, CVE-2026-70411, CVE-2026-63689, CVE-2026-63691, CVE-2026-63690, Summary: Dell Container Storage Modules remediation is available for Multiple vulnerabilities in third-party that could be exploited by malicious users to compromise the affected system.…
-
· BleepingComputer US nadpis události
Dell asks admins to patch max severity CSM flaws as soon as possible
Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments. [...]