Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-76105

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random…

Risk score
43/100
CVSS
7.1 v3.1
Exploit chance (30 days)
0.1%
Published
6 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Affected
Dell Container Storage Modules before 1.18.0
Fix
Upgrade Dell Container Storage Modules to 1.18.0 or later.
Exploitation
No known exploitation

Story map

Story map: Dell Container Storage ModulesTHE FLAWSTHE FIXCVE-2026-76105Dell Container StorageModules, versions prior to1.18.0 contain(s) an Use of…CVSS 7.1 · EPSS 0%CVE-2026-63688Missing authenticationCVSS 10.0 · EPSS 1%CVE-2026-63692Missing authentication can leadto privilege escalationCVSS 10.0 · EPSS 1%CVE-2026-61421Hard-coded credentials canlead to privilege escalationCVSS 9.8 · EPSS 0%Upgrade Dell Container…1.18.0or later on your release lineWho is exposedDell Container Storage Modulesbefore 1.18.0AMBER · PATCH THIS WEEKDell ContainerStorage ModulesDell Container Storage Modules(CSM), versions prior to v1.18.0,contains a MissingAuthentication for CriticalFunction vulnerability in thecsm-authorization-storagegRPC server. An…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-330 (CWE-330)9 other warnings in 30 days →Same productEarlier Dell Container Storage Modules warnings9 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Container Storage Modules: Amber, patch this week. Dell Container Storage Modules (CSM), versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to storage backend adminis…

The flaws

  • CVE-2026-76105: Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random… (CVSS 7.1 · EPSS 0%)
  • CVE-2026-63688: Missing authentication (CVSS 10.0 · EPSS 1%)
  • CVE-2026-63692: Missing authentication can lead to privilege escalation (CVSS 10.0 · EPSS 1%)
  • CVE-2026-61421: Hard-coded credentials can lead to privilege escalation (CVSS 9.8 · EPSS 0%)

The fix

Upgrade Dell Container Storage Modules: 1.18.0 or later on your release line

Who is exposed: Dell Container Storage Modules before 1.18.0

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 7.1 high

References

Original description

Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.

Last activity 6 Oct 2026. Patch Forecast updates every hour.