Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control

Dell released security update DSA-2026-448 fixing multiple critical vulnerabilities in Container Storage Modules (CSM), including CVE-2026-63688 and CVE-2026-63692 rated CVSS 10.0, that could allow unauthenticated remote attackers to take administrative control of storage arrays, forge JWTs, bypass authorization, or gain root access to Kubernetes nodes; Dell advises immediate upgrade to CSM 1.18.0+, rotation of JWT signing secrets, and review of logs and RBAC settings.