Patch Forecast
Amber warning
Patch this week.

CVE-2026-67273

Dell Container Storage Modules: template injection can lead to privilege escalation

Risk score
65/100
CVSS
9.6 v3.1
Exploit chance (30 days)
0.4%
Published
6 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Affected
Dell Container Storage Modules before 1.18.0
Fix
Upgrade Dell Container Storage Modules to 1.18.0 or later.
Exploitation
No known exploitation

Story map

Story map: Dell Container Storage ModulesTHE FLAWSTHE FIXCVE-2026-67273Template injection can lead toprivilege escalationCVSS 9.6 · EPSS 0%CVE-2026-63688Missing authenticationCVSS 10.0 · EPSS 1%CVE-2026-63692Missing authentication can leadto privilege escalationCVSS 10.0 · EPSS 1%CVE-2026-61421Hard-coded credentials canlead to privilege escalationCVSS 9.8 · EPSS 0%Upgrade Dell Container…1.18.0or later on your release lineWho is exposedDell Container Storage Modulesbefore 1.18.0AMBER · PATCH THIS WEEKDell ContainerStorage ModulesDell Container Storage Modules(CSM), versions prior to v1.18.0,contains a MissingAuthentication for CriticalFunction vulnerability in thecsm-authorization-storagegRPC server. An…Where it standsNo known exploitationCONNECTS TOSame weaknessTemplate injection (CWE-1336)26 other warnings in 30 days →Same productEarlier Dell Container Storage Modules warnings9 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Container Storage Modules: Amber, patch this week. Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend adminis…

The flaws

  • CVE-2026-67273: Template injection can lead to privilege escalation (CVSS 9.6 · EPSS 0%)
  • CVE-2026-63688: Missing authentication (CVSS 10.0 · EPSS 1%)
  • CVE-2026-63692: Missing authentication can lead to privilege escalation (CVSS 10.0 · EPSS 1%)
  • CVE-2026-61421: Hard-coded credentials can lead to privilege escalation (CVSS 9.8 · EPSS 0%)

The fix

Upgrade Dell Container Storage Modules: 1.18.0 or later on your release line

Who is exposed: Dell Container Storage Modules before 1.18.0

Where it stands

  • No known exploitation

Connects to

Why it is Amber

  • CVSS 9.6 critical

References

Original description

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Last activity 6 Oct 2026. Patch Forecast updates every hour.