← Vulnerability database

CVE-2026-67273

Critical
9.6 CVSS v3.1
Published
Oct 6, 2026
Updated
Oct 20, 2026
Vendor
Dell
Affected versions
See affected products
Weakness
CWE-1336

Summary

Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Severity

Critical (9.6)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Affected products

  • Dell Container Storage Modules < 1.18.0

Exploitation status

Unknown

Technical details

Technical analysis has not been written for this record yet.

Mitigation & remediation

Follow the vendor advisory linked below for patches and workarounds.

References

Source NIST NVD
Last syncedOct 28, 2026 19:45 UTC
Reviewed Oct 28, 2026
Page updatedOct 29, 2026