CVE-2026-70411
CVSS Score
7.1
EPSS Score
0.0%
EPSS Percentile
0th
Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags.
| CWE | CWE-306 |
| Vendor | dell |
| Product | container storage modules (csm) |
| Published | Oct 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for dell container storage modules (csm)
Be the first to know when new high vulnerabilities affecting dell container storage modules (csm) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
High
Availability
None
Affected Versions
Dell / Container Storage Modules (CSM)
0 < 1.18.0 or later