CVE-2026-67273

Published: Oct 6, 2026Modified: Oct 20, 2026

9.6

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Exploitability: 3.1 / Impact: 5.8

Source: NVD

Description

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected (1)

Products: Dell: Container Storage Modules

1 product

Container Storage Modules

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Container Storage Modules	version < 1.18.0

Related CWEs

Improper Neutralization of Special Elements Used in a Template Engine

The product uses a template engine to insert or process externally-influenced input, but it does not neutralize or incorrectly neutralizes special elements or syntax that can be interpreted as template expressions or other code directives when processed by the engine.

References (1)

https://www.dell.com/support/kbdoc/en-us/000515771/dsa-2026-448-security-update-for-dell-container-storage-modules-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.