CVE-2026-67270

Summary

The Dell Container Storage Modules (CSM) proxy-server component has a certificate validation flaw that allows adjacent network attackers to potentially steal administrator credentials from storage backends. This vulnerability affects versions prior to 1.18.0 and can lead to unauthorized access to critical storage infrastructure.

Exploitability

Exploitation requires an adjacent network attacker with no authentication prerequisites, making it moderately easy to exploit with a simple network-based attack vector.

Blast radius

If exploited, this vulnerability could expose administrator credentials for storage backends, potentially allowing attackers to access and manipulate sensitive data stored in Dell CSM environments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 1.18.0 or later to remediate the certificate validation vulnerability in the proxy-server component.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.