CVE-2026-70411: Container Storage Modules (CSM) 0 to before 1.18.0 or later

Affected technology

Container Storage Modules (CSM) · 0 to before 1.18.0 or later
Dell

Description’s affected range: versions prior to 1.18.0,

Component: Not specified by the source
Function: vulnerability

Attack conditions (Vendor/CNA, CVSS 3.1): Adjacent network · No privileges required · No user interaction required

What an attacker can do

An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags. Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality impact as low; integrity impact as high; availability impact as none.